NIST's guide to locking down web services, including WS discovery mechanisms like WSDLs.

Remember web hackers, authentication.asmx?WSDL is your friend

NIST- Guide to secure web services