Recommended reading for security research [closed]

Question

Which books would you recommend a security researcher? Specifically interested in

• Malware analysis
• Finding new software vulnerabilities
• General web security

But don't limit yourself to these topics only. Also, on-line reading could be good just as well.

Answer 1

I really love the book Gray Hat Hacking, and would recommend it to anyone wanting to learn.

Answer 2

Online reading references,

1. Arbor blog -- Asert
2. SecurityFocus
3. Richard Bejtlich's TaoSecurity blog (and, Best Book Bejtlich Read in 2008)
   • also look at this
4. SANS Security Resources
5. SecLists at Insecure.org -- from where comes NMap!
6. Anti-Malware reviews blog
7. WormBlog used to be interesting -- but no new posts these days
8. SecureWorks Research links

Some light reading,

1. Botnets: The Killer Web App

Answer 3

My first thought is Bruce schneier. A good introduction to his world is Crypto-Gram newsletter.

Answer 4

Not sure this answers your question; I'd recommend books that give you some insight on how Black Hats think, what motivates them and how others have caught them.

1. The Cuckoo's Egg
2. Takedown: The Pursuit and Capture of Kevin Mitnick
3. The Art of Deception: Controlling the Human Element of Security
4. Masters of Deception: The Gang That Ruled Cyberspace

Answer 5

one of my favorite websites on the subject:

www.syngress.com

some excellent publications and many freebies.