I came across quite a good presentation on keeping wordpress secure, definitely worth a look http://wordpress.tv/2013/06/24/brad-williams-security/