Excellent resource here is Apache Security.
Some of critical information is available in the sample chapters online;