Showing titles in Security & Encryption

In Threats: What Every Engineer Should Learn From Star Wars, accomplished security expert and educator Adam Shostack delivers an accessible and engaging discussion of security threats and how to develop secure systems. The book will prepare you to take on the Dark Side as you learn—in a structured and memorable way—about the threats to your systems. You'll move from thinking of security issues as clever one-offs and learn to see the patterns they follow.

A Financial Times 'Best Thing I Read This Year' 2017 LONGLISTED FOR THE FT & MCKINSEY BUSINESS BOOK OF THE YEAR AWARD Google. Amazon. Facebook. The modern world is defined by vast digital monopolies turning ever-larger profits. Those of us who consume the content that feeds them are farmed for...

The NIST Cybersecurity Framework (CSF) 2.0 provides guidance to industry, government agencies, and other organizations to manage cybersecurity risks. It offers a taxonomy of high-level cybersecurity outcomes that can be used by any organization - regardless of its size, sector, or maturity - to better understand, assess, prioritize, and communicate its cybersecurity efforts.

During the Global Financial Crisis in 2008, our financial infrastructure failed. Governments bailed out the very institutions that let the economy down. This episode spurred a serious rethink of our financial system. In DeFi and the Future of Finance, Campbell R. Harvey, Ashwin Ramachandran, and Joey Santoro introduce the new world of decen­tralized finance. The book argues that the current financial landscape is ripe for dis­ruption and we are seeing, in real time, the reinvention of finance. 

From Microsoft's President and one of the tech industry's wisest thinkers, a frank and thoughtful reckoning with how to balance enormous promise and existential risk as the digitisation of everything accelerates. In Tools and Weapons, Brad Smith takes us behind the scenes on some of the biggest stories to hit the tech industry in the past decade. From Edward Snowden's NSA leak to the NHS WannaCry ransomware attack, this book is essential listening to understand what's happening in the world around us.

This timely book explores the alarming rise of ransomware: malicious software blocking users from their systems or data until they've paid money to regain access or to prevent the release of sensitive information. High-profile British examples of the twenty-first century have targeted national libraries and healthcare organizations; in the US, hackers of Pennsylvania's Lehigh Valley Health Network held patient data hostage—when their demands went unmet, they published topless photographs of women with breast cancer.

Despite its reputation as a language only of spies and hackers, cryptography plays a critical role in our everyday lives. Though often invisible, it underpins the security of our mobile phone calls, credit card payments, web searches, internet messaging, and cryptocurrencies - in short, everything we do online.  

What is blockchain? What is Bitcoin? How can central banks be instrumental in guiding a nation's economy? What are the underlying causes of trade deficits? Do trade wars actually help the domestic economy? How has the behavior of millennials and Generation Z affected the global economy? Find out...

Organizations are increasingly vulnerable as attack surfaces grow and cyber threats evolve. Addressing these threats is vital, making attack surface management (ASM) essential for security leaders globally. This practical book provides a comprehensive guide to help you master ASM. Authors Ron Eddings and MJ Kaufmann offer actionable solutions for newcomers and experts alike, using machine learning and AI techniques. ASM helps you routinely assess digital assets to gain complete insight into vulnerabilities, and potential threats.

Learn application security from the very start with this comprehensive and approachable guide. Alice and Bob Learn Application Security is an accessible and thorough resource for anyone seeking to incorporate, from the beginning of the System Development Life Cycle, best security practices in software development. This book covers all the basic subjects such as threat modeling and security testing, but also dives deep into more complex and advanced topics for securing modern software systems and architectures.

The Next-Gen Information Security Professional flips the script on what it means to succeed in this field. This isn’t a manual for the latest tools or another dry checklist of compliance standards. It’s a playbook for the human side of security: how to influence, persuade, and lead when the stakes couldn’t be higher.

Unmasking the Social Engineer: The Human Element of Security focuses on combining the science of understanding nonverbal communications with the knowledge of how social engineers, scam artists, and con men use these skills to build feelings of trust and rapport in their targets. The author helps listeners understand how to identify and detect social engineers and scammers by analyzing their nonverbal behavior. Unmasking the Social Engineer shows how attacks work.

The journey towards robust OT cybersecurity is not a destination but a continuous evolution. As technology advances and threat actors become more sophisticated, the need for vigilance and adaptation remains paramount. This book has provided a framework—a set of guiding principles and actionable strategies—for building a resilient cybersecurity posture. However, the true measure of success lies not in the implementation of specific technologies or policies but in the cultivation of a security-conscious culture.

Cyber risk management is one of the most urgent issues facing enterprises today. This book presents a detailed framework for designing, developing, and implementing a cyber risk management program that addresses your company's specific needs. Ideal for corporate directors, senior executives, security risk practitioners, and auditors at many levels, this guide offers both the strategic insight and tactical guidance you're looking for.

Investigating Cryptocurrencies is the first book to help corporate, law enforcement, and other investigators understand the technical concepts and the techniques for investigating crimes utilizing the blockchain and related digital currencies such as Bitcoin and Ethereum. Listen to this book to understand blockchain and transaction technologies, set up and run cryptocurrency accounts, identify users of cryptocurrencies, and more.

Every day, we send and receive countless messages—emails from work, reminders from banks, shipping updates from online stores, and texts from friends. Communicating through screens has become so common that most of us don’t even think twice before opening a message, clicking a link, or responding to a notification. But in that sea of normal communication lies something much more dangerous: messages designed to trick you, to make you give away your passwords, financial details, or other private information. These scams often come hidden in the very tools we trust most—email and text.

Real-World Cryptography teaches practical techniques for day-to-day work as a developer, sysadmin, or security practitioner. There’s no complex math or jargon. You’ll learn building blocks like hash functions and signatures, and cryptographic protocols like HTTPS and secure messaging. This audiobook is a joy to listen to - and it might just save your bacon the next time you’re targeted by an adversary after your data.

In an age where almost everything we do leaves a digital footprint, the field of digital forensics has never been more important. From tracking down cybercriminals to recovering critical data, digital forensics is at the forefront of solving modern-day crimes and protecting sensitive information.

The word “hacking” has preconceived connotations, and most people don't quite grasp the whole concept that goes into the process of hacking. Hackers have a notorious reputation. But there’s a side of hacking that most people aren’t aware of: ethical hacking. You don't hear about the ethical hacking in the news, but there are people out there with the same job description fighting the malicious hackers daily, and they get the bad rep.

Cloud technology has changed the way we approach technology. It's also given rise to a new set of security challenges caused by bad actors who seek to exploit vulnerabilities in a digital infrastructure. You can put the kibosh on these hackers and their dirty deeds by hardening the walls that protect your data. Using the practical techniques discussed in Cloud Security for Dummies, you'll mitigate the risk of a data breach by building security into your network from the bottom up.