Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
Higher Education: 15 Books to Help Cybersecurity Pros Be Better
Newest First  |  Oldest First  |  Threaded View
mrmarks001
mrmarks001,
User Rank: Apprentice
4/17/2019 | 12:57:43 PM
Additional books I recommend
  • @War by Shane Harris
  • The Perfect Weapon: War, Sabotage, and Fear in the Cyber Age by David E. Sanger
  • Messing with the enemy
  • Kingpin
  • Zero Day
  • Ghost in the Wires
  • The Art of * series by Kevin Mitnick

 

cbear42
cbear42,
User Rank: Strategist
12/13/2018 | 12:39:57 PM
Another Great Cybersecurity Books Resource
The Cybersecurity Canon of Books is maintained by Palo Alto Networks with this goal:

"To identify a list of must-read books for all cybersecurity practitioners – be they from industry, government or academia — where the content is timeless, genuinely represents an aspect of the community that is true and precise, reflects the highest quality and, if not read, will leave a hole in the cybersecurity professional's education that will make the practitioner incomplete.

Some great reads and Palo Alto takes it all quite seriously. The have an entire committee set up to review the books, and anyone can submit a book for their review and possible inclusion.

cybercanon.paloaltonetworks.com

 
enhayden1321
enhayden1321,
User Rank: Author
12/13/2018 | 12:16:20 AM
One More Book Suggestion
One more book to add to this collection is THE VICTORIAN INTERNET.
BrianN060
BrianN060,
User Rank: Ninja
12/12/2018 | 11:35:18 PM
Re: Great picks
I'm sure I recommended The Cuckoo's Egg here before. 

One compelling aspect of the story is that it took place when events transpired over longer time periods - one closer to our human experience.  Stoll was able to follow the attacker's activities in real time, as most progressed no faster than a person can type.  
SimonB1262125
SimonB1262125,
User Rank: Apprentice
12/12/2018 | 4:16:38 PM
Good list
Obviously everyones version will be slightly different but personally I would have to have Mitnick's Art of Deception. Read it many uears ago, around the same time as Cuckoos Egg, and totally blew me away as I was fairly new to the industry at the time and never come across social engineering before.
REISEN1955
REISEN1955,
User Rank: Ninja
12/12/2018 | 3:14:39 PM
Great picks
The Cuckoo's Egg is a wonderful if terrifying book - if only for the complacency so many military sites and sys admins felt about their passwords, user accounts and walls.  Incredible and fun read but full of lessons that still apply. 


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
How Machine Learning, AI & Deep Learning Improve Cybersecurity
Machine intelligence is influencing all aspects of cybersecurity. Organizations are implementing AI-based security to analyze event data using ML models that identify attack patterns and increase automation. Before security teams can take advantage of AI and ML tools, they need to know what is possible. This report covers: -How to assess the vendor's AI/ML claims -Defining success criteria for AI/ML implementations -Challenges when implementing AI
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2022-40923
PUBLISHED: 2022-09-30
A vulnerability in the LIEF::MachO::SegmentCommand::virtual_address function of LIEF v0.12.1 allows attackers to cause a denial of service (DOS) through a segmentation fault via a crafted MachO file.
CVE-2022-40943
PUBLISHED: 2022-09-30
Dairy Farm Shop Management System 1.0 is vulnerable to SQL Injection via bwdate-report-ds.php file.
CVE-2022-35155
PUBLISHED: 2022-09-30
Bus Pass Management System v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the searchdata parameter.
CVE-2022-35156
PUBLISHED: 2022-09-30
Bus Pass Management System 1.0 was discovered to contain a SQL Injection vulnerability via the searchdata parameter at /buspassms/download-pass.php..
CVE-2022-40341
PUBLISHED: 2022-09-30
mojoPortal v2.7 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted PNG file.