Computer Security

The book covers every topic in the latest CISSP exam syllabus, organized in a format that makes it easy to drill down on specific exam domains and concepts at-a-glance, making it an essential exam resource for anyone who aims to prepare for the exam without wasting time or money.

This book covers every topic in the latest CISM exam syllabus, approaching topics from the ISACA perspective. It's 325+ pages organized in a format that makes it easy to drill down on specific exam domains and concepts at-a-glance, making it an essential exam resource for anyone who aims to prepare for the CISM exam without wasting time or money.

Linux is one of the best decisions you can make for your computer — but knowing where to start is the hard part. This guide walks you through everything: choosing a distribution, installing it, and using it confidently every day. It was written by Jay LaCroix of Learn Linux TV, for complete beginners. No prior experience required.

Reverse engineering gets a powerful upgrade with Claude Code. Learn how to investigate, understand and reconstruct software you’re authorized to analyze, while keeping evidence, accuracy and reproducibility at the center. From legacy systems to modern codebases, this book turns AI into a practical partner for serious software analysis.

This isn't a book to put on a shelf. It's meant to be used, tested, and adapted as you build your networking skills. In this new edition, I've been working on making the teaching flow better and making technical stuff clearer without overwhelming you. You'll get the basics down, like how C++ works well with TCP/IP and how sockets are the foundation for communication. Then, I'll show you how to build real client-server apps, set up IP addressing, and use protocols like HTTP, FTP, SMTP, IMAP, and DNS directly through C++ code. Each example is practical and you can actually implement it. It shows you not just how something works, but why it matters in real networking scenarios.

Now we have made it to the kernel. Let's assume you have a chip, any chip, from the suppliers we've just discussed. You might choose to manually load a kernel onto that chip, using a GRand Unified Bootloader (GRUB) to load (or strap) the kernel, and pass all permissions over to it. It is the animus in the machine. There are many different kernels, but they share one interesting characteristic to security: they run with the highest level of access, mediating interactions between user applications and the physical chips. A good kernel will handle low-level tasks like CPU scheduling, memory allocation, device input/output, and system calls. It is the bridge between software and hardware: if the kernel fails to load or crashes, the entire system will halt. To make this level of access a bit safer, the kernel is designed to be always resident in memory, and execute in a protected mode that is isolated from applications. This prevents damage to core system data...

Master the art of identifying and reporting critical vulnerabilities in password reset flows with this specialist guide. It provides a complete, step-by-step methodology for discovering complex logic flaws that lead to full account takeover. Whether you are a beginner or a professional researcher, this resource gives you the precise strategies needed to turn architectural weaknesses into high-impact security reports.

Master Node.js security and secure coding best practices through analyzing and exploiting real-world vulnerable npm packages.

This book covers every topic in the latest CISA exam syllabus, approaching topics from the ISACA perspective. It's 400+ pages, organized in a format following the syllabus that makes it easy to drill down on specific exam domains and concepts at-a-glance, making it an essential exam resource for anyone who aims to prepare for the CISA exam without wasting time or money.

This book is a workshop where things go wrong on the page, in front of you, and then get fixed in code, with the output that proves the fix worked. There's no need to be a security expert to follow along. We'll be moving from the interpreter to the supply chain, from the token to the human clicking Allow, and from a single tool to a whole host of untrusting servers.

Build Android apps that can survive real-world attacks. Modern Android Security is a practical, Kotlin-first guide that shows how apps are actually compromised—and the proven patterns you need to protect data, APIs, and users in a hostile environment.

Implementing ISO/IEC 27001:2022 is easier with the right guide. Packed with practical steps, ready-to-use templates and real-world examples, this book helps you build, manage and certify an effective Information Security Management System with confidence.

Learn everything there is to know about building and maintaining your own home or workplace virtual lab environment on the most popular hypervisors today!

The comprehensive, current PGP and GnuPG reference: from air-gapped key generation to YubiKey provisioning, Git signing, email encryption, and emergency recovery. Can't afford it? I got you -- scroll to end of description

Modern Browser Fingerprinting: Techniques and CodeBuild a Deep Technical Understanding of How Modern Browsers Reveal Device Identity Browser fingerprinting has evolved far beyond cookies. Modern websites can identify devices using hundreds of signals originating from browser internals, graphics hardware, JavaScript runtimes, network protocols, rendering engines, media subsystems, machine learning models, and operating system artifacts. Even when traditional tracking mechanisms are blocked, browsers continue to expose unique characteristics that can be combined into highly stable device identities.