Android Forensik

This blog post is kind of special since I am writing about book that I actually read in German and not in its original language. Andrew Hoog wrote his book “Android Forensik - Datenrecherche, Analyse und mobile Sicherheit bei...

Tangled Web: A Guide to Securing Modern Web Applications

Tangled Web: A Guide to Securing Modern Web Applications by Michal Zalewski is a comprehensive review of the security of web applications. In comparison with other works on this topic the author dives in deeper and focusses on the http...

Sketch Nodes

Sketch Noting has been trending for quite a while - but what is it actually? Mike Rohde defines it in his book as an illustrated way of note taking. He thereby combines drawings, typography and structuring items like lines,...

W. Ury, R. Fisher - Getting Past NO

Getting Past No was written by William Ury and Roger Fisher. They created the manual for negotiations. And as most of the time - great wisdom are the simple things. That is what it boils down to in this...

C.Hadnagy, P.F.Kelly, P.Ekman - Unmasking The Social Engineer

Christopher Hadnagy’s book “Unmasking the social engineer” appeared in 2014. It covers the main aspects of non verbal communications. Starting with the first chapters on hands, arms, torso and legs - the table of content looks like an ordinary...

Evan Wheeler - Risk Management

Evan Wheelers book “Risk Management” is organised in three parts. The first one introduces the reader to risk management as a discipline. Followed by the second part providing the reader with various approaches to assess and analyse risk. The...

Mark Talabis - Information Security Analytics

Information Security Analytics by Mark Talabis takes various approaches how to do analytics with a low budget. The author describes ways from managing huge amounts of log files with hadoop and map reduce to text mining based on the...

Joe Viega, Andy Oram, Anton Chuvakin - Beautiful Security

Beautiful Security is a very interesting book. It is way more than just a collection of essays about information security. Besides the success story of OWASP - the Open Web Application Security Project - it tells various other stories...

Shon Harris - Gray Hat Hackers Handbook

The Gray Hat Hackers Handbook, as published in January 2011, claims to summarize the knowledge a Gray Hat should have. Well, I am not so happy with it. It covers a lot of material: starting from USB stick based attacks...

Dafydd Stuttard, Marcus Pinto - Web Application Hackers Handbook

The web applications hackers handbook has been written by Dafydd Stuttard and Marcus Pinto. You can get it here. Interestingly enough it has been published in two editions. First in 2007 and then again in 2011. However both editions...

Sebastian Klipper - Konflikt Management Für Sicherheitsprofis

This book is written in German - so rather unusual for my book reviews. Sebastian Klipper summarizes various practices and explanations on how to handle, avoid and manage conflict situations in his 193 pages long book. It focusses on...

Christopher Hadnagy, Michelle Fincher - Phishing Dark Waters - The Offensive and Defensive Sides of Malicious E-mails

Phishing is a problem everybody is confronted with every day. It is not only limited to email also telephone calls, SMS or even DNS-Changes fall into this category. But let us focus on emails as the authors did. The border...

Andrew Jarquith - Security Metrics beyond Fear, Uncertainty and Doubt

Jarquith’s Book, also published in 2007, is still a valid resource once you are concerned with IT-Security Metrics. Within the first chapter the author argues why metrics are important and what makes a good metric. Thereby he extends far beyond...

Charlie Miller - The iOS Hackers Handbook

Charlie Millers Book “The iOS Hackers Handbook” contains what you expect it to. It is a very rigorous guide on how to look for security flaws and vulnerabilities within the iOS 1.4 at time I was reading it.

However...