Computer Security

Now we have made it to the kernel. Let's assume you have a chip, any chip, from the suppliers we've just discussed. You might choose to manually load a kernel onto that chip, using a GRand Unified Bootloader (GRUB) to load (or strap) the kernel, and pass all permissions over to it. It is the animus in the machine. There are many different kernels, but they share one interesting characteristic to security: they run with the highest level of access, mediating interactions between user applications and the physical chips. A good kernel will handle low-level tasks like CPU scheduling, memory allocation, device input/output, and system calls. It is the bridge between software and hardware: if the kernel fails to load or crashes, the entire system will halt. To make this level of access a bit safer, the kernel is designed to be always resident in memory, and execute in a protected mode that is isolated from applications. This prevents damage to core system data...

Official companion guide to the OWASP Juice Shop. Being a web application with a vast number of intended security vulnerabilities, the OWASP Juice Shop is supposed to be the opposite of a  best practice  or  template application  for web developers: It is an awareness, training, demonstration and exercise tool for security risks in modern web apps.

Learn about binary instrumentation using the Frida toolkit using practical examples. This book is not deeply focused in theory but practical use cases instead, from basic uses of the API to how to apply it in real-world scenarios. We will apply instrumentation under Linux, Windows and MacOS systems.

Security engineering is about building systems that stay secure when things go wrong. This book covers the fundamentals of secure applications, infrastructure and operations through practical examples, real breaches and proven security practices.

Whether you’re exposing APIs to partners, building microservices, or connecting legacy systems, API Gateways sit at the heart of your infrastructure. This book takes you step by step through architecture, security, traffic control, OpenAPI validation, and real-world deployment. With vendor-neutral guidance and practical examples using the open-source Membrane API Gateway, it’s a hands-on resource for API developers, architects, and platform teams.

Hate calling yourself a "non-technical" founder or professional? Never again. The ultimate guide to thinking digitally and leading software companies.

The 350-701 exam changed in August 2026. This guide was written for the version you are about to sit — all six domains, all 47 topics, in blueprint order.

El libro cubre todos los temas del programa de estudios más reciente del examen CISSP, organizado en un formato que facilita profundizar en dominios y conceptos específicos del examen de un vistazo, lo que lo convierte en un recurso esencial para cualquiera que aspire a prepararse para el examen sin desperdiciar tiempo ni dinero.

The book covers every topic in the latest Security+ exam syllabus (SY0-701), with 300 pages organized in a format that makes it easy to drill down on specific exam domains and concepts at-a-glance, making it an essential exam resource for anyone who aims to prepare for the exam without wasting time or money.

Embedded security is an architecture problem, not a checklist.This book shows how to build a coherent security design for real devices: what embedded cybersecurity means, why it’s different in embedded systems (constraints, lifecycle, physical access, limited patching), and how to turn that into practical design decisions. You’ll learn threat modeling and trust boundaries, then the core mechanisms that must work together: secure boot and root of trust, key management, secure communication, and robust firmware updates. Early access: updated regularly as new chapters and examples are added. Purchasers receive updates.

LTR102 takes the lead from LTR101 and dives a little deeper into the wider security topics, bringing an insight into defensive, offensive and collaborative security fields. It looks into the differences between the three and builds on the skillsets required, like LTR101 it will give you an overview and insight.

All of the basic topics to get you from zero to junior pentester level - covering off everything you need to know to start breaking into web application penetration testing industry or looking for flaws on bug bounties. (LTR101)

A hacked WordPress site can look perfectly normal. Follow real investigations across files, databases, hidden users, cron jobs, hosting, DNS, checkout pages, and blacklists—and learn how to find the full compromise, remove it safely, and stop it from coming back.

The premise of this book is to provide students a hands-on, go-to resource for building a secure, customizable lab environment in order to enable their own specific pursuits.

Compilation of best practices for evaluating weak spots in your product and company and fostering a robust security culture within your organization.