Web Services Security for Java

A four series article from oreilly by
Bilal Siddiqui
Part 1
Part 2
Part 3
Part 4