Here is a graphical representation of the various system calls that occur when the Apache webserver is running on Linux:
Now, let us look at a similar picture for IIS running on a Windows server:
The blogger who created these thinks this is clearly shows why a Microsoft webserver is inherently less secure.
Also check out the related slashdot discussion