{"id":2414,"date":"2014-08-22T15:30:10","date_gmt":"2014-08-22T15:30:10","guid":{"rendered":"http:\/\/kasperskydaily.com\/b2b\/?p=2414"},"modified":"2019-11-15T07:13:51","modified_gmt":"2019-11-15T12:13:51","slug":"books-on-cybersecurity-5-recommendations-from-our-experts","status":"publish","type":"post","link":"https:\/\/www.kaspersky.com\/blog\/books-on-cybersecurity-5-recommendations-from-our-experts\/2414\/","title":{"rendered":"Books on cybersecurity: 5+ recommendations from our experts"},"content":{"rendered":"

Recently we approached our security experts from the Global Research and Analysis Team and asked them which books they would recommend to other security experts (or those who would like to become experts). They named five (well, actually ten) books focused on computer security in general and malware analysis in particular.<\/p>\n

\n<\/p>

A small disclaimer first: Below is a handful of links to Amazon, and not just because our experts prefer buying there. Actually, it is from there we have acquired the preliminary list of popular books on the topic that we showed to our experts. They have marked the most interesting ones and recommended some others. In total we received feedback from our colleagues in 10 different countries, and that is why we provide links to a store accessible worldwide. Fortunately, all of the books listed below are available in both paper and electronic form.<\/p>\n

Let\u2019s go! <\/p>

Most of the books listed are available in paper and electronic forms.<\/p>Tweet<\/a><\/blockquote>\n


\n\"1\"Practical Reverse Engineering: x86, x64, ARM, Windows Kernel, Reversing Tools, and Obfuscation<\/strong>
\nBruce Dang; 2014
\nLink<\/a><\/p>\n

If you think, after reading the first chapter, that the presentation is somewhat inane you are wrong. Reading this book, I was at first just happy with its easy language, comprehensible even for a non-specialist, but then I had to pay the price. Just after the introduction there goes an avalanche of extremely detailed information about reverse engineering, Windows kernel specifics and processor architectures, without much regard for your qualification level. It\u2019s more a textbook than a reference for an experienced specialist. Security researchers\u2019 work usually starts with malware code analysis, and this book is just fine to get yourself familiarized with this task.<\/p>\n


\n\"2\"The Practice of Network Security Monitoring: Understanding Incident Detection and Response<\/strong>
\nRichard Bejtlich; 2013
\nLink<\/a><\/p>\n

This book offers a quality review of the tools for monitoring network security. What is specifically important, the description of tools is supplemented with practical examples of using them. It\u2019s unclear, however, why there are so many memory dumps showcased \u2013 this is especially eye-catching in a paper variant. But, according to our experts, if you are just getting acquainted with network security, this is one of the best textbooks around.<\/p>\n


\n\"3\"Threat Modeling: Designing for Security<\/strong>
\nAdam Shostack; 2014
\nLink<\/a><\/p>\n

Although each of us models the threats intuitively, few do it on the expert level. Adam Shostack is one of such rare professional. At Microsoft he\u2019s working on Security Development Lifecycle Threat Modeling, whatever that means, and the experience he had accumulated, is recounted in a 600-page thick book, suitable for both the beginners and the experienced specialists.<\/p>\n

Starting from the basic things such as four-way combination \u2013 \u201cWhat do we build\u201d, \u201cWhat may go wrong with the built thing\u201d, \u201cWhat can we do with something that has gone wrong\u201d and \u201cHow good is our analysis\u201d, Shostack goes in-depth with every aspect of threat modelling, offering techniques, software tools and petty tricks he has developed and refined over the course of his own work, those help building an efficient threat model for anything. By the way, the author emphasize the aspects more suitable for the applications developers, IT systems architects and security experts, which is useful too.<\/p>\n

The book is greatly prettified by a gentle trolling that the author uses regularly \u2013 as he describes a typical clich\u00e9 surfacing during the threats modeling process or during the meetings with the project participants (for instance, such absolutely \u201chumane\u201d, non-computer problem as \u201cwho is responsible for checking this SQL request?\u201d).<\/p>\n

\"wide\"<\/a><\/p>\n

You can follow our security experts from the GReaT team in Twitter. The easiest way to do this is to subscribe to this list:<\/p>\n

Tweets from https:\/\/twitter.com\/KasperskyLabB2B\/lists\/great<\/a>
\n