Books

Adversaries are recording encrypted traffic today to read it once a quantum computer arrives. NIST published the replacements in 2024, and OpenSSL ships them now. This is the migration: measured on one laptop with stock OpenSSL 3.5.5, with every claim labeled verified, reported, or proposed.

Your AI features are an attack surface. Learn to break them before someone else does — from prompt injection to retrieval poisoning, with hands-on labs.

APIs are the foundation of modern software and one of its most critical attack surfaces. API Security: A Definitive Reference for Building Secure APIs at Scale shows you how to build APIs that are secure by design, resilient under attack, and ready for production.

Discover how Docker is revolutionizing modern software development by making applications faster to build, easier to deploy, and more reliable to run. Whether you are just getting started or refining production workflows, this practical guide will help you master containers through clear explanations, hands-on examples, and real-world techniques that you can apply with confidence.

メモリ破損は、依然としてソフトウェアの脆弱性の中でも最も重大な分類の一つです。本書では、メモリ破損の基礎から、現代のエクスプロイト技術、それらを防ぐために設計された防御機構までを包括的に取り上げ、セキュリティ専門家や研究者がこれらの脆弱性の仕組みを深く理解し、効果的な対策を講じるための知識を提供します。

Speicherkorruption zählt zu den schwerwiegendsten Klassen von Softwareschwachstellen. Dieses Buch vermittelt die Grundlagen, moderne Exploitation-Techniken und wirksame Schutzmaßnahmen und richtet sich an IT-Sicherheitsexperten sowie Schwachstellenforscher.

메모리 손상(Memory Corruption)은 여전히 가장 심각한 소프트웨어 취약점 유형 중 하나입니다. 이 책은 메모리 손상의 기초 개념, 최신 익스플로잇 기법, 그리고 이를 방어하기 위해 설계된 다양한 방어 메커니즘을 살펴보며, 보안 전문가와 연구자들이 이러한 취약점이 어떻게 동작하는지 깊이 이해하고 이를 효과적으로 완화하는 방법을 익힐 수 있도록 돕습니다.

Discover how to uncover, preserve, and analyze digital evidence with confidence. From fundamental forensic principles to advanced investigative techniques, this practical guide combines hands-on exercises, real-world case studies, and industry-standard tools to help you conduct modern digital investigations with accuracy and credibility.

In Google Cloud, the compromised system you need often disappears before you can touch it. This practitioner's guide shows you how to pursue attackers through Cloud Audit Logs, IAM, and ephemeral infrastructure instead, with runnable gcloud commands and BigQuery queries for every step.

Master AWS incident response from CloudTrail to courtroom-ready evidence. Learn to acquire EC2 and container evidence, trace identity-based attacks, investigate S3 exfiltration, and build forensic readiness, all through three real-world incidents walked end to end.

Azure investigations don't start with a disk image, they start with the control plane. This field guide walks incident responders through Azure's logging architecture, identity attack chains, VM and container forensics, and evidence acquisition at cloud scale, with three full attack scenarios worked end to end.

Cloud security is built, not bought. This practical guide goes beyond checklists and compliance to teach the engineering principles behind secure cloud environments. Learn how to design resilient identity systems, protect workloads, secure data, detect threats, and respond to incidents across AWS, Microsoft Azure, and Google Cloud using production-tested techniques and real-world architectures.

Master the complete lifecycle of authorized adversary emulation, from threat modeling and initial access through objective completion. Every offensive technique paired with detection and remediation, complete with ready-to-use templates for rules of engagement, ATT&CK mapping, and findings reports.

A practical, multi-cloud guide to securing AWS, Azure, and GCP workloads. Twelve chapters cover IAM hardening, CSPM/CWPP, IaC scanning, Kubernetes defense, and cloud incident response, each paired with runnable policies, scan configs, and detection rules you can put to work immediately.

A field-tested, platform-agnostic methodology for proactive threat hunting, from hypothesis formation and data foundations to a full scenario library organized by MITRE ATT&CK tactic. Every technique ships as portable Sigma YAML or pseudocode, built to outlast whichever SIEM or EDR you run today.