Blink Monitor » security

The Tangled Web

rleir — Fri, 13 Jan 2012 23:48:59 +0000

The Tangled Web – A Guide to Securing Modern Web Applications, Michal Zalewski, – 2012

Web application programmers will want to read this timely and important book. 250 pages. Contents:

Security in the world of Web applications
Part I: Anatomy of the Web
It starts with a URL
Hypertext transfer protocol
Hypertext markup language
Cascading style sheets
Browser-side scripts
Non-HTML document types
Content rendering with browser plug-ins
Part II: Browser security features
Content isolation logic
Origin inheritance
Life outside same-origin rules
Other security boundaries
Content recognition mechanisms
Dealing with rogue scripts
Extrinsic site privileges
Part III: A glimpse of things to come
New and upcoming security features
Other browser mechanisms of note
Common Web vulnerabilities.

Malware Analysts Cookbook

rleir — Sat, 31 Dec 2011 23:04:30 +0000

Malware Analysts Cookbook and DVD – Tools and Techniques for Fighting Malicious Code, Michael Ligh, 2010

Gray Hat Hacking

rleir — Sat, 31 Dec 2011 22:49:53 +0000

Gray Hat Hacking – The Ethical Hacker’s Handbook, Allen Harper, – 2011

Cyber Crime Secrets

rleir — Sat, 03 Dec 2011 22:54:10 +0000

Cyber Crime Secrets, John Townsend, 2012

Kids in grades 5 to 8 will like this book. Large format hardcover, 30 pages.

Worm – The First

rleir — Fri, 11 Nov 2011 18:07:16 +0000

Worm – The First Digital World War, Mark Bowden, 2011

A book about the war on the Internet between the black hats and the white hats. It focuses on the Conficker worm. Hardcover, 200 pages.

Darkmarket

rleir — Tue, 01 Nov 2011 09:12:22 +0000

Darkmarket – Cyberthieves, Cybercops and You By Glenny, Misha (- 2011)

This book is about fraud on the internet. Police investigators face some tough challenges in tracking down criminals. Worse, there are challenges in getting the fraudsters into court and getting them penalized. This book is very readable, a page-turner that you can’t put down, but does not go very deep into the technology of internet security. Hardcover, 300 pages.

Metasploit

rleir — Tue, 11 Oct 2011 16:29:47 +0000

Metasploit – The Penetration Tester’s Guide, David Kennedy, 2011

Web security professionals will want to read this book. Metasploit is a toolkit containing the newest tools for pen testing. The example code is in Python, so programmers may want to read it too. 300 pages.

The Tangled Web

rleir — Thu, 29 Sep 2011 13:06:37 +0000

The Tangled Web – Securing Modern Web Applications, Michal Zalewski, (- 2011)

Written by the author of the excellent 2005 book `Silence on the wire`.

Cisco Networking All-in-One

rleir — Thu, 29 Sep 2011 12:56:25 +0000

Cisco Networking All-in-One for Dummies, Edward Tetz, (- 2011)

Network administrators will want to read this book. 650 pages.

Ghost in the Wires

rleir — Fri, 26 Aug 2011 14:38:14 +0000

Ghost in the Wires – My Adventures as the World’s Most Wanted Hacker, Kevin Mitnick, 2011

This book is infamous ‘social engineer’ Mitnick’s own life story. It is expertly co-written by William Simon, and has a foreword by Steve Wozniak (designer of Apple’s first products). Mitnick was expert at phone phreaking, and was jailed for doing it. Hardcover, 400 pages.