Security Engineering

AI is changing the way we find and fix software vulnerabilities. Intelligent Discovery explores the techniques behind this shift, from static analysis to AI-driven vulnerability research and automated repair. With a clear-eyed look at both the potential and the pitfalls, it shows what these tools can do, where they fall short and why human expertise still matters.

Identity protocols are easy to underestimate. This book goes deep into SAML 2.0, OAuth 2.0 and OpenID Connect, showing how they work in practice, where they break and how to build and audit secure systems. With protocol traces, working code and real attack analysis, it is a hands-on guide for engineers working with modern identity.

A practical reference for securing real-world OT, ICS and SCADA environments.Roadmap for engineers, CISOs, and consultants to master industrial cybersecurity. Learn to secure ICS, SCADA, and Industry 4.0 environments, apply IEC 62443 & NIS 2, and build robust defense-in-depth architectures—from real-world attack analysis to practical incident response.

A practical engineering guide to hardening Python Docker containers. Learn step-by-step how to implement rootless execution, drop dangerous Linux capabilities, and secure your production deployments.

Threat Hunting starts with a question, not an alert.You do not need to already be a Threat Hunter to start thinking like one.CYBER HUNTER Project is a practical guide designed both for people taking their first steps into Threat Hunting and for cybersecurity professionals who want to sharpen the way they hunt, investigate and build detections.The book starts with the foundations: what Threat Hunting really is, how a hunter thinks, how to build a hypothesis, what evidence to look for, and how Threat Hunting differs from Threat Detection. From there, it moves progressively into real hunting investigations, showing how those ideas work against actual security telemetry.If you are starting from zero, CYBER HUNTER Project gives you a structured path into the field without assuming that you already know how to hunt.If you already work in a SOC, Incident Response, Detection Engineering, Threat Intelligence or Cybersecurity, it gives you new hunting ideas, investigation techniques and practical examples that you can adapt to your own environment.And if you are already a Threat Hunter, the goal is to help you go further: challenge assumptions, build stronger hypotheses, correlate evidence differently, discover new hunting opportunities and turn successful investigations into reusable detections.Across Email, Endpoints, Networks, Threat Intelligence, Identity, Software and Cloud Applications, CYBER HUNTER Project takes you through practical scenarios involving phishing, ransomware behaviour, suspicious authentication, network activity, threat intelligence feeds, cloud collaboration, device code authentication and many other hunting opportunities.Inside of the book, you will find:• Threat Hunting fundamentals explained from the ground up • A practical approach to building Hunt Hypotheses • Real, self-contained Threat Hunting investigations • Evidence-driven investigation strategies • Detection Opportunities derived from successful hunts • Detection Libraries with additional hunting ideas • Companion KQL queries for Microsoft Defender XDR and Microsoft Sentinel • MITRE ATT&CK mappings and reference material • Practical Threat Intelligence and IOC/IOA analysis • Ideas you can adapt to build your own huntsThe companion queries use KQL and Microsoft security telemetry, but the hunting methodology is intentionally vendor-neutral. The objective is not to memorize queries. It is to understand why a hunt works, what evidence makes it valuable, and how to reproduce that thinking on your own platform.Start with the fundamentals. Learn through real hunts. Build your own hypotheses. Improve the way you investigate.Whether this is your first Threat Hunting book or you already hunt threats every day, this project is designed to become a practical reference you can keep beside you and return to whenever you need your next hunting idea.The logic is the point, not the dialect.

AI agents introduce new security risks that traditional approaches often fail to address. This handbook shows you how to identify threats, build effective sandboxes and enforce least-privilege access. With practical examples and production-ready implementations, it gives you the tools to build AI systems that are secure by design.

Across every chapter in this book, we'll look at real software, break it down and put it back together again so we can use it. We'll encounter a stripped binary, a scrambled algorithm, an undocumented file format, a mobile app protecting its backend, a web client, a hardened sample that fights back, and a live protocol whose secrets only exist while it's running. We're not stopping at one clever trick either. We'll get the job done to a standard that's verifiable and someone else can trust.

Ready to take your infrastructure skills to the next level? Mastering Pulumi shows you how to build, deploy and manage real-world infrastructure across multiple clouds using familiar programming languages. From your first project to complex enterprise platforms, discover practical techniques and proven patterns to make infrastructure more reliable, secure and easier to maintain.

Ready to take Supabase beyond the basics? Learn how to build real-world applications from the ground up, with secure database design, multi-tenant architecture and performance tuning at every stage. Packed with practical code and lessons from production engineering, this book shows you how to build applications that are ready for the demands of the real world.

Master the art of securing Industrial IoT with NIST Lightweight Cryptography. This practical guide walks you through building a complete, zero-trust cyber-physical system—from ASCON-encrypted C99 firmware on the ESP32 to secure Modbus bridging and PLC integration—without sacrificing battery life or deterministic performance.

Patching vulnerabilities is only part of the job. Beyond the Patch explores how software weaknesses arise, how attackers find and exploit them and what it takes to stop them before they become real threats. From code-level analysis to practical defense strategies, this book offers the knowledge and tools to build more secure software and stay ahead of evolving attacks.

Industrial systems and smart buildings are increasingly connected, creating new opportunities for cyberattacks. This book explores the threats, vulnerabilities and security challenges facing modern infrastructure, with practical guidance on protecting industrial networks and building automation systems using proven architectures, established standards and lessons drawn from real-world incidents.

“Guns. Lots of guns.” — Neo, The Matrix (1999)Every domain has its weaknesses. Every privilege has a path.Go inside Active Directory with a practical, 100-page field manual featuring six phases of penetration testing, real-world attack techniques, actionable commands, and defensive insights.Know the domain. Understand the attack paths. Master the methodology.

AI-assisted code often looks finished while resting on a premise nobody checked. A practical, evidence-based method for developers, tech leads and architects to find system-level defects before they ship.

Build security into the full delivery lifecycle, from risk and trust boundaries to CI/CD controls and resilient operations. Visual explanations and practical examples connect secure architecture, supply-chain safeguards, verification, and incident recovery.