Careers & People

9/9/2014
05:30 PM
Marilyn Cohodas
Marilyn Cohodas
Slideshows
Connect Directly
Twitter
LinkedIn
RSS
E-Mail
50%
50%

InfoSec Book Club: Whats On Your Fall Reading List?

Dark Reading community members share the books that inform and inspire their decisions and interactions as security professionals.
Previous
1 of 11
Next

I don’t know about you but when I see the yellow school buses rolling and the days start getting shorter, my biological clock tells me it’s time to put away the trashy summer novels and dive into some serious reading to psyche me up for the big-fourth quarter push at work.

But what to read? In the search for some great recommendations, I reached out to members of the Dark Reading community. I asked them to share the titles of books that have informed and inspired them in their day to day decisions and interactions as a security professional.

The selection criteria was wide open. They could recommend a technical tome, a novel, or a work of non-fiction with a business, management or political focus. The primary consideration was how they applied what they read to their job as a security practitioner.

(Image: By Work Projects Administration Poster Collection [Public domain], via Wikimedia Commons)
(Image: By Work Projects Administration Poster Collection [Public domain], via Wikimedia Commons)

Here’s our list. But it’s just a beginning. Be sure to add your own recommendations and reasons in the comments.

 

 

Marilyn has been covering technology for business, government, and consumer audiences for over 20 years. Prior to joining UBM, Marilyn worked for nine years as editorial director at TechTarget Inc., where she launched six Websites for IT managers and administrators supporting ... View Full Bio

Previous
1 of 11
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
mhasib
100%
0%
mhasib,
User Rank: Apprentice
9/25/2014 | 8:27:38 PM
Re: Good Reading
The second edition of my book Cybersecurity Leadership: Powering the Modern Organization was released this month. It deals with the people and governance aspects of cybersecurity and provides a leadership model to engage everyone in an organization into a culture of cybersecurity. 
ODA155
50%
50%
ODA155,
User Rank: Ninja
9/22/2014 | 1:59:32 PM
Re: Good Reading
Hi Kelly,

I was just thinking about putting in an order on Amazon for that, but the Audio CD version was not listed, I should check B&N.  But here is something that I was also looking at that should tie-in pretty nicely with your recommendation.

 

@War: The Rise of the Military-Internet Complex Hardcover – November 11, 2014
by Shane Harris

 

 
Marilyn Cohodas
50%
50%
Marilyn Cohodas,
User Rank: Strategist
9/16/2014 | 8:35:18 AM
Re: Surviving on a Diet of Poisoned Fruit: Reducing the National Security Risks of Americas Cyber Dependencies
Thanks for the book recommendation, @PaulH698. The author certainly has the credentials to make a strong case! Among them: Vice Chair of the Board of Trustees of The RAND Corporation, member of the Defense Policy Board and The President's Intelligence Advisory Board, a Director of the Center for a New American Security and from the spring of 2007 through the Presidential election of 2008, Dr. Danzig was a senior advisor to Senator Obama on national security issues and he was the 71st Secretary of the Navy. 

You can find a link to a PDF or Kindle version of Surviving on a Diet of Poisoned Fruit here:

http://www.cnas.org/surviving-diet-poisoned-fruit.

 

 
PaulH698
50%
50%
PaulH698,
User Rank: Apprentice
9/15/2014 | 11:49:14 PM
Surviving on a Diet of Poisoned Fruit: Reducing the National Security Risks of Americas Cyber Dependencies
It is free. Available in .pdf, kindle and tablet formats. While written from an American viepoint robably the best overview of what democratic nations need to do to preserve the benefits of an open Internet. Google the title in order to find it.

'"Surviving on a Diet of Poisoned Fruit: Reducing the National Security Risks of America's Cyber Dependencies" by the Honorable Richard Danzig offers key insights about how to improve U.S. national security policymaking to address cyber insecurity. In the report, the author examines existing information technology security weaknesses and provides nine specific recommendations for the U.S. government and others to cope with these insecurities.'
Marilyn Cohodas
0%
100%
Marilyn Cohodas,
User Rank: Strategist
9/11/2014 | 11:32:02 AM
Re: Good Reading
I loved The Lowlands, but Cory Doctorow's Homeland sounds intriguing. I'm putting it on my to read list.

Keep your book recommendations coming! They're great. 
Kelly Jackson Higgins
50%
50%
Kelly Jackson Higgins,
User Rank: Strategist
9/11/2014 | 10:47:41 AM
Re: Good Reading
I'm looking forward to reading Kim Zetter's "Countdown to Zero Day: Stuxnet and the Launch of the World's First Digital Weapon," which comes out in November. 
theb0x
50%
50%
theb0x,
User Rank: Ninja
9/11/2014 | 10:29:50 AM
Re: Good Reading
A must read: Ghost in the Wires by Kevin Mitnick.
aws0513
50%
50%
aws0513,
User Rank: Ninja
9/11/2014 | 10:22:44 AM
Good Reading
That is quite a good list of books.  Three of them I have already delved.
One book that I treat as a personal reading requirement every year is The Effective Executive by Peter Drucker.

The Effective Executive was first published in 1966, but the content in the book is timeless.  At a short ~200 pages in size, the book is pure sage advice for anyone who is in a leadership or management role.  The concepts in the book are foundational and it is my opinion that anyone who aspires to become a leader in their trade, whatever it may be, read and adopt the concepts and practices it provides.  At approximately $10 USD, the price is very reasonable.

I re-read the book every year as a mental "reset" for my management skills.  It is easy for any of us to get wrapped around the axle on unproductive or less important things.  It is my opinion that The Effective Executive can help anyone in any trade rethink the drink in regards to priorities and resource management.
Want Your Daughter to Succeed in Cyber? Call Her John
John De Santis, CEO, HyTrust,  5/16/2018
Don't Roll the Dice When Prioritizing Vulnerability Fixes
Ericka Chickowski, Contributing Writer, Dark Reading,  5/15/2018
New Mexico Man Sentenced on DDoS, Gun Charges
Dark Reading Staff 5/18/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: "Security through obscurity"
Current Issue
Flash Poll
Surviving the IT Security Skills Shortage
Surviving the IT Security Skills Shortage
Cybersecurity professionals are in high demand -- and short supply. Find out what Dark Reading discovered during their 2017 Security Staffing Survey and get some strategies for getting through the drought. Download the report today!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-8010
PUBLISHED: 2018-05-21
This vulnerability in Apache Solr 6.0.0 to 6.6.3, 7.0.0 to 7.3.0 relates to an XML external entity expansion (XXE) in Solr config files (solrconfig.xml, schema.xml, managed-schema). In addition, Xinclude functionality provided in these config files is also affected in a similar way. The vulnerabilit...
CVE-2018-8012
PUBLISHED: 2018-05-21
No authentication/authorization is enforced when a server attempts to join a quorum in Apache ZooKeeper before 3.4.10, and 3.5.0-alpha through 3.5.3-beta. As a result an arbitrary end point could join the cluster and begin propagating counterfeit changes to the leader.
CVE-2018-1067
PUBLISHED: 2018-05-21
In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is ...
CVE-2018-7268
PUBLISHED: 2018-05-21
MagniComp SysInfo before 10-H81, as shipped with BMC BladeLogic Automation and other products, contains an information exposure vulnerability in which a local unprivileged user is able to read any root (uid 0) owned file on the system, regardless of the file permissions. Confidential information suc...
CVE-2018-11092
PUBLISHED: 2018-05-21
An issue was discovered in the Admin Notes plugin 1.1 for MyBB. CSRF allows an attacker to remotely delete all admin notes via an admin/index.php?empty=table (aka Clear Table) action.