I have 10 years experience writing software, the last 5 of which has been writing ASP applications. I started working for a small firm this spring and have become the defacto security expert. I...