Leanpub Header

Skip to main content

Filters

Category: "Security Engineering"

Books

  1. Inside the Domain: A Field Manual for Active Directory Penetration Testing

    “Guns. Lots of guns.” — Neo, The Matrix (1999)Every domain has its weaknesses. Every privilege has a path.Go inside Active Directory with a practical, 100-page field manual featuring six phases of penetration testing, real-world attack techniques, actionable commands, and defensive insights.Know the domain. Understand the attack paths. Master the methodology.

  2. Intelligent Discovery
    Intelligent Discovery
    AI-Powered Vulnerability Research and Software Security
    Steve Publications

    AI is changing the way we find and fix software vulnerabilities. Intelligent Discovery explores the techniques behind this shift, from static analysis to AI-driven vulnerability research and automated repair. With a clear-eyed look at both the potential and the pitfalls, it shows what these tools can do, where they fall short and why human expertise still matters.

  3. The Shape of Generated Code, Vol. 1: The Reviewer's Kit
    The Shape of Generated Code, Vol. 1: The Reviewer's Kit
    The Reviewer's Kit: A Practical Method to Review AI-Generated Code
    Edinaldo Sá

    AI-assisted code often looks finished while resting on a premise nobody checked. A practical, evidence-based method for developers, tech leads and architects to find system-level defects before they ship.

  4. DevSecOps A Complete Visual Guide
    DevSecOps A Complete Visual Guide
    From Secure Foundations to Practical Delivery and Resilient Operations
    Reiner Braun

    Build security into the full delivery lifecycle, from risk and trust boundaries to CI/CD controls and resilient operations. Visual explanations and practical examples connect secure architecture, supply-chain safeguards, verification, and incident recovery.

  5. Docker Container Security & Rootless Engineering
    Docker Container Security & Rootless Engineering
    ​Rootless Engineering & Production Hardening
    AhmedAdawy

    A practical engineering guide to hardening Python Docker containers. Learn step-by-step how to implement rootless execution, drop dangerous Linux capabilities, and secure your production deployments.

  6. Intune A Complete Visual Guide
    Intune A Complete Visual Guide
    A Practical Visual Learning Guide
    Reiner Braun

    Learn Microsoft Intune through visual explanations of enrollment, device configuration, applications, compliance, and endpoint operations.

  7. IAM A Complete Visual Guide
    IAM A Complete Visual Guide
    Complete Practical Guide: Foundations, Lifecycle, Authentication, Authorization, Cloud, Workloads, Operations, and Delivery
    Reiner Braun

    Understand identity and access management from authentication and lifecycle foundations to cloud, workload identity, security, and production operations.

  8. Zero Trust A Complete Visual Guide
    Zero Trust A Complete Visual Guide
    A Practical Visual Learning Guide
    Reiner Braun

    Understand how identity, devices, policy, enforcement, and telemetry work together in Zero Trust. Clear diagrams trace access decisions and explain practical security architecture, migration, and operations.

  9. Modern Browser Fingerprinting: Techniques and Code

    Build a Deep Technical Understanding of How Modern Browsers Reveal Device IdentityBrowser fingerprinting has evolved far beyond traditional cookies and persistent tracking identifiers. Modern websites can derive identifying signals from browser internals, graphics hardware, JavaScript runtimes, network protocols, rendering engines, media subsystems, and operating system characteristics. When combined, these signals can help distinguish devices and correlate browsing sessions even when conventional tracking mechanisms are unavailable.Modern Browser Fingerprinting: Techniques and Code is a comprehensive technical guide to the architecture, mathematics, implementation, and practical applications of browser fingerprinting. It examines how individual signals are generated, how their identifying value can be measured, and how multiple observations can be combined to construct probabilistic device profiles.Combining technical explanations with source code, controlled experiments, telemetry analysis, and statistical methods, the book explores browser fingerprinting across security research, fraud prevention, bot detection, web analytics, and digital privacy. It also examines the limitations of fingerprint-based identification, including measurement noise, browser updates, hardware changes, signal instability, and privacy-preserving countermeasures.

  10. AI Agent Security
    AI Agent Security
    From Models to Actions
    Cliffhanger

    Your AI agent can sound right and still act wrong. Learn how to secure the path from a model’s suggestion to a real-world action—with practical guidance on data, permissions, tools, adversarial testing, and recovery.

  11. Cybersecurity in Artificial Intelligence: Attacks Defenses and Real World Application

    Secure AI. Understand the Threats. Build More Trustworthy Intelligent Systems.Explore adversarial attacks, data poisoning, model theft, AI-enabled cyber threats, secure AI development, adversarial defenses, trustworthy AI, MLOps security, governance, privacy, red teaming, and the future of AI cybersecurity through practical concepts and real-world case studies.

  12. Identity Protocols
    Identity Protocols
    Engineering SAML, OAuth 2.0 and OpenID Connect
    Steve Publications

    Identity protocols are easy to underestimate. This book goes deep into SAML 2.0, OAuth 2.0 and OpenID Connect, showing how they work in practice, where they break and how to build and audit secure systems. With protocol traces, working code and real attack analysis, it is a hands-on guide for engineers working with modern identity.

  13. Frontier AI Safety, Mechanistic Interpretability & Alignment Engineering
    Frontier AI Safety, Mechanistic Interpretability & Alignment Engineering
    Inspecting Neural Circuits, Steering Vectors, Autonomous Capability Evals, and Scalable Oversight for Superintelligent Systems.
    Edgar Milvus
    No Description Available
  14. Engineering Autonomous AI Agents
    Engineering Autonomous AI Agents
    Architecture, Tool Use, Security and Operations
    Steve Publications

    Build AI agents that actually hold up in production. This practical guide covers agent architecture, tool use, multi-agent systems, security, reliability, observability and operations, with working code throughout. Learn how to build agents that are dependable, cost-aware and ready for the real world.

  15. The AI-Era CISO
    The AI-Era CISO
    A Strategic Guide to Security Leadership in the Age of Artificial Intelligence
    Steve Publications

    AI is changing the security landscape faster than most organizations can adapt. This practical guide explores how CISOs can lead through that change, strengthen digital trust and resilience, govern AI risks and protect the business without slowing the innovation it needs.