A pretty sweeping survey review of the issues. Includes a good but brief summary on payments.
“This article gives a thorough overview of the different security issues regarding the WWW, and provides insight in the current state-of-the-art and evolution of the proposed and deployed solutions.”