Over the years, Fred Cohen has probably written more about information security on a broader range of subjects than any 3 other experts. He's posted a lot of it on his "all.net" web site, which he's had since about the dawn of the World Wide Web. What the site lacks in pizazz it makes up for in content.
The only problem is that he doesn't put much attention into navigation. It takes patience to poke around and find what you want. I know he's had some classic papers on his virus work on-line, but I couldn't find them easily. That led me to create the following collection of links.