Books

The 350-701 exam changed in August 2026. This guide was written for the version you are about to sit — all six domains, all 47 topics, in blueprint order.

Implementing ISO/IEC 27001:2022 is easier with the right guide. Packed with practical steps, ready-to-use templates and real-world examples, this book helps you build, manage and certify an effective Information Security Management System with confidence.

A test-by-test playbook that turns Maester's 676 security checks into risks you understand and fixes you can run.

This book is a workshop where things go wrong on the page, in front of you, and then get fixed in code, with the output that proves the fix worked. There's no need to be a security expert to follow along. We'll be moving from the interpreter to the supply chain, from the token to the human clicking Allow, and from a single tool to a whole host of untrusting servers.

Build offensive security tools that go beyond simple scripts. BlackHat Ruby shows how to create scanners, fuzzers, protocol analyzers and exploit frameworks with clean, practical Ruby code. Along the way you'll see how these techniques work, where the legal boundaries are and how defenders spot and stop them.

Adversaries are recording encrypted traffic today to read it once a quantum computer arrives. NIST published the replacements in 2024, and OpenSSL ships them now. This is the migration: measured on one laptop with stock OpenSSL 3.5.5, with every claim labeled verified, reported, or proposed.

Your AI features are an attack surface. Learn to break them before someone else does — from prompt injection to retrieval poisoning, with hands-on labs.

APIs are the foundation of modern software and one of its most critical attack surfaces. API Security: A Definitive Reference for Building Secure APIs at Scale shows you how to build APIs that are secure by design, resilient under attack, and ready for production.

メモリ破損は、依然としてソフトウェアの脆弱性の中でも最も重大な分類の一つです。本書では、メモリ破損の基礎から、現代のエクスプロイト技術、それらを防ぐために設計された防御機構までを包括的に取り上げ、セキュリティ専門家や研究者がこれらの脆弱性の仕組みを深く理解し、効果的な対策を講じるための知識を提供します。

Speicherkorruption zählt zu den schwerwiegendsten Klassen von Softwareschwachstellen. Dieses Buch vermittelt die Grundlagen, moderne Exploitation-Techniken und wirksame Schutzmaßnahmen und richtet sich an IT-Sicherheitsexperten sowie Schwachstellenforscher.

메모리 손상(Memory Corruption)은 여전히 가장 심각한 소프트웨어 취약점 유형 중 하나입니다. 이 책은 메모리 손상의 기초 개념, 최신 익스플로잇 기법, 그리고 이를 방어하기 위해 설계된 다양한 방어 메커니즘을 살펴보며, 보안 전문가와 연구자들이 이러한 취약점이 어떻게 동작하는지 깊이 이해하고 이를 효과적으로 완화하는 방법을 익힐 수 있도록 돕습니다.

Offensive Security with Kali Linux is a practical guide to ethical hacking and penetration testing, taking you from foundational Linux and networking concepts to advanced exploitation techniques. With a strong emphasis on ethical practice and real-world methodology, you'll learn to identify vulnerabilities, assess systems responsibly, and strengthen security using Kali Linux.

Build a source-level debugger in Rust from the ground up while uncovering the operating system, CPU, and compiler mechanisms behind modern debugging. Through hands-on implementation, you'll learn how processes, memory, breakpoints, and DWARF debug information come together to make source-level debugging possible.

In Google Cloud, the compromised system you need often disappears before you can touch it. This practitioner's guide shows you how to pursue attackers through Cloud Audit Logs, IAM, and ephemeral infrastructure instead, with runnable gcloud commands and BigQuery queries for every step.