Here is a graphical representation of the various system calls that occur when the Apache webserver is running on Linux:

Now, let us look at a similar picture for IIS running on a Windows server:

The blogger who created these thinks this is clearly shows why a Microsoft webserver is inherently less secure.
Also check out the related slashdot discussion