Security Engineering

Short Description of the BookSecuring Modern AI Applications is a practical guide to securing LLM-powered applications, RAG systems, AI agents, and modern AI development environments.The book explains AI-specific threats such as prompt injection, data leakage, RAG poisoning, insecure tool use, agent abuse, and AI supply-chain risks while also covering traditional application security, privacy, governance, secure development, monitoring, testing, and red teaming.Designed for developers, AI engineers, cybersecurity professionals, architects, and technology leaders, the book focuses on practical principles that remain useful as AI technologies continue to evolve.Build AI. Secure AI. Govern AI.

This book is all about testing and closing the gap between infrastructure health and output quality, and how easily that gap can be filled for weeks by a failure that's gone unnoticed.This book looks at the less obvious side of the problem. In the next few chapters, we're going to run 41 experiments on one application. About half of them will give you a result that the system doesn't report. It's not a dig at anyone's engineering, since the systems in question are competently built and mostly behave well.

A hacked WordPress site can look perfectly normal. Follow real investigations across files, databases, hidden users, cron jobs, hosting, DNS, checkout pages, and blacklists—and learn how to find the full compromise, remove it safely, and stop it from coming back.

SOC 2 doesn’t have to be confusing. This practical handbook walks you through building, documenting and auditing a compliance program from the ground up. Packed with real-world examples, templates and checklists, it gives founders, security teams, engineers and auditors a clear path from first steps to continuous compliance.

Cybersecurity is much more than hacking, as it is often portrayed in movies. At its core, cybersecurity is about protecting people, businesses, governments, and communities from digital threats. Throughout this book, you'll discover how computers communicate, how networks function, how attackers identify vulnerabilities, and how security professionals defend systems against those attacks.

AI coding agents can build, run and break things at machine speed. This book shows you how to contain them safely. From Linux isolation and microVMs to WebAssembly, threat modeling and incident response, you’ll learn how to design production-grade sandboxes that let autonomous agents execute code without putting your systems at risk.

Cloud security is built, not bought. This practical guide goes beyond checklists and compliance to teach the engineering principles behind secure cloud environments. Learn how to design resilient identity systems, protect workloads, secure data, detect threats, and respond to incidents across AWS, Microsoft Azure, and Google Cloud using production-tested techniques and real-world architectures.

Security engineering is about building systems that stay secure when things go wrong. This book covers the fundamentals of secure applications, infrastructure and operations through practical examples, real breaches and proven security practices.