Reading
I read, review, recommend, and write books on digital security. I created several Amazon.com Listmania Lists showing my favorite books, in three categories:Bookpool asked me to publish my favorite 10 books from the past 10 years, so you may find that list helpful too.
Want Me to Review Your Book?
I used to read and review dozens of books per year (17 in 2000, 42 in 2001, 24 in 2002, 33 in 2003, 33 in 2004, 26 in 2005, 52 in 2006, 25 in 2007). Now I almost exclusively focus on books which fill gaps in my knowledge. My Amazon.com Wish List shows books I'm keeping an eye on.
If you're an author or publisher, and you'd like me to review a book proposal or published work, email 'taosecurity at gmail dot com'.
Reading List
I plan to read the following titles.
- June 2008
- July 2008
- The New School of Information Security
- Nmap Network Scanning
- Security Engineering, 2nd Ed
- OSSEC Host-Based Intrusion Detection Guide
- Google Hacking for Penetration Testers Vol 2
- Managing Catastrophic Loss of Sensitive Data
- Secrets Stolen, Fortunes Lost
- Implementing 802.1X Security Solutions for Wired and Wireless Networks
- Implementing NAP and NAC Security Technologies
- August 2008
- Web Application Hacker's Handbook
- Hacking Exposed: Web 2.0
- Crimeware (pub Apr 08)
- Software Security Engineering (pub May 08)
- September 2008
- Beginning C, 4th Ed
- C in a Nutshell
- Professional Assembly Language
- Introduction to Assembly Language Programming, 2nd Ed
- October 2008
- Buffer Overflow Attacks
- Shellcoder's Handbook, 2nd Ed
- Writing Security Tools and Exploits
- Reversing: Secrets of Reverse Engineering
- Reverse Engineering Code with IDA Pro)
- The IDA Pro Book (pub Aug 08)
- November 2008
- The Art of Software Security Testing
- The Art of Software Security Assessment
- Hunting Security Bugs
- Secure Programming with Static Analysis
- The Art of Debugging with GDB (pub July 08)
- Advanced Windows Debugging
- Fuzzing
- December 2008
- Gray-Hat Hacking, 2nd Ed
- Hacking: the Art of Exploitation, 2nd Ed
- Hacking Exposed: Windows, 3rd Ed
- Hacking Exposed: Linux, 3rd Ed (pub Aug 08)
- Wi-Foo II (pub Jul 08)
- January 2009
- Beginning Python, 2nd Ed (pub Sep 08)
- Dive Into Python
- Foundations of Python Network Programming
- Python Cookbook, 2nd Ed
- Programming Python, 3rd Ed
- Gray Hat Python (pub Oct 08)
- February 2009
- Pocket Guide to TCP/IP Sockets (C Version)
- Understanding UNIX/Linux Programming
- UNIX Network Programming, 3rd Ed
- BSD Sockets Programming from a Multi-Language Perspective
- March 2009
- The Secrets to Carrier Class Network Security (pub Feb 09)
- Beautiful Security (pub Mar 09)
- Windows Internals, 5th Ed (pub Nov 08)
The Economist
Beyond digital security works, I read the best international news weekly on the planet -- the Economist. I've been a subscriber since 3 May 1997, when I wrote a check for $54.50 and committed to "take part in a severe contest between intelligence, which presses forward, and an unworthy, timid ignorance obstructing our progress." Given the Economist has been doing this since September 1843, they have a minor head start.