Lista de Livros de Segurança

Caros, segue abaixo mais uma lista de livros de segurança que classifico como muito importantes para quem se interessa por segurança, tanto a parte de proteção, quanto a de ataque.

Esta lista, foi compilada a partir de indicações de profissionais e pesquisadores como Dino Dai Zovi e Thomas Ptacek, além de minha experiência pessoal e leituras que tenho feito.

- Hacking: The Art of Exploitation, 2nd Edition

• http://www.amazon.com/Hacking-Art-Exploitation-Jon-Erickson/dp/1593271441/ref=cm_lmf_tit_1

- The Art of Software Security Testing: Identifying Software Security Flaws

• http://www.amazon.com/Art-Software-Security-Testing-Identifying/dp/0321304861/ref=cm_lmf_tit_2

- The Mac Hacker's Handbook

• http://www.amazon.com/Mac-Hackers-Handbook-Charles-Miller/dp/0470395362/ref=cm_lmf_tit_3

- C Programming Language (2nd Edition)

• http://www.amazon.com/Programming-Language-2nd-Brian-Kernighan/dp/0131103628/ref=cm_lmf_tit_4

- Expert C Programming

• http://www.amazon.com/Expert-Programming-Peter-van-Linden/dp/0131774298/ref=cm_lmf_tit_5

- Fuzzing: Brute Force Vulnerability Discovery

• http://www.amazon.com/Fuzzing-Brute-Force-Vulnerability-Discovery/dp/0321446119/ref=cm_lmf_tit_6

- Fuzzing for Software Security Testing and Quality Assurance (Artech House Information Security and Privacy)

• http://www.amazon.com/Fuzzing-Software-Security-Assurance-Information/dp/1596932147/ref=cm_lmf_tit_7

- The Art of Software Security Assessment: Identifying and Preventing Software Vulnerabilities

• http://www.amazon.com/Art-Software-Security-Assessment-Vulnerabilities/dp/0321444426/ref=cm_lmf_tit_8

- The Art of Assembly Language

• http://www.amazon.com/Art-Assembly-Language-Randall-Hyde/dp/1886411972/ref=cm_lmf_tit_9

- The IDA Pro Book: The Unofficial Guide to the World's Most Popular Disassembler

• http://www.amazon.com/IDA-Pro-Book-Unofficial-Disassembler/dp/1593271786/ref=cm_lmf_tit_10

- Reversing: Secrets of Reverse Engineering

• http://www.amazon.com/Reversing-Secrets-Engineering-Eldad-Eilam/dp/0764574817/ref=cm_lmf_tit_11

- Exploiting Software: How to Break Code

• http://www.amazon.com/Exploiting-Software-How-Break-Code/dp/0201786958/ref=cm_lmf_tit_12

- Rootkits: Subverting the Windows Kernel

• http://www.amazon.com/Rootkits-Subverting-Windows-Greg-Hoglund/dp/0321294319/ref=cm_lmf_tit_14

- The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws

• http://www.amazon.com/Web-Application-Hackers-Handbook-Discovering/dp/0470170778/ref=cm_lmf_tit_3

- Cryptography Engineering: Design Principles and Practical Applications

• http://www.amazon.com/Cryptography-Engineering-Principles-Practical-Applications/dp/0470474246/ref=cm_lmf_tit_4

- The Practice of Programming

• http://www.amazon.com/Practice-Programming-Brian-W-Kernighan/dp/020161586X/ref=cm_lmf_tit_5

- C Interfaces and Implementations: Techniques for Creating Reusable Software

• http://www.amazon.com/Interfaces-Implementations-Techniques-Creating-Reusable/dp/0201498413/ref=cm_lmf_tit_6

- Surreptitious Software: Obfuscation, Watermarking, and Tamperproofing for Software Protection

• http://www.amazon.com/Surreptitious-Software-Obfuscation-Watermarking-Tamperproofing/dp/0321549252/ref=cm_lmf_tit_16

- Metasploit: The Penetration Tester's Guide

• http://www.wowebook.com/book/metasploit

- Managing Infrastructure with Puppet

• http://www.wowebook.com/book/managing-infrastructure-with-puppet

- iPhone and iOS Forensics: Investigation, Analysis and Mobile Security for Apple iPhone, iPad and iOS Devices

• http://www.wowebook.com/book/iphone-and-ios-forensics

- The Basics of Information Security: Understanding the Fundamentals of InfoSec in Theory and Practice

• http://www.wowebook.com/book/the-basics-of-information-security

- Security Power Tools

• http://www.wowebook.com/book/security-power-tools

- Cyber Warfare: Techniques, Tactics and Tools for Security Practitioners

• http://www.wowebook.com/book/cyber-warfare

- Security Engineering: A Guide to Building Dependable Distributed Systems, 2nd Edition

• http://www.wowebook.com/book/security-engineering-2nd-edition

- The Shellcoder's Handbook, 2nd Edition

• http://www.wowebook.com/book/the-shellcoders-handbook-2nd-edition

- BackTrack 4: Assuring Security by Penetration Testing

• http://www.wowebook.com/book/backtrack-4

- Web Security, Privacy and Commerce, 2nd Edition

• http://www.wowebook.com/book/web-security-privacy-and-commerce-2nd-edition

- Securing the Cloud: Cloud Computer Security Techniques and Tactics

• http://www.wowebook.com/book/securing-the-cloud

- Hacking Exposed: Web Applications, 3rd Edition

• http://www.wowebook.com/book/hacking-exposed-web-applications-3rd-edition

- Ninja Hacking: Unconventional Penetration Testing Tactics and Techniques

• http://www.wowebook.com/book/ninja-hacking

- Practical Lock Picking: A Physical Penetration Tester's Training Guide

• http://www.wowebook.com/book/practical-lock-picking

- Gray Hat Hacking The Ethical Hackers Handbook, 3rd Edition

• http://www.wowebook.com/book/gray-hat-hacking-the-ethical-hackers-handbook-3rd-edition

- Hacking Exposed: Wireless, 2nd Edition

• http://www.wowebook.com/book/hacking-exposed-wireless-2nd-edition

- Hacking Exposed: Malware & Rootkits

• http://www.wowebook.com/book/hacking-exposed-malware-and-rootkits

- Hacking Exposed: Linux, 3rd Edition

• http://www.wowebook.com/book/hacking-exposed-linux-3rd-edition

- Hacking Exposed: Web 2.0

• http://www.wowebook.com/book/hacking-exposed-web-2-0

A maioria, se não todos, podem ser encontrados para consulta e download na internet.

Mas concordo que, se o livro realmente é bom e você gostou dele, comprá-lo é um incentivo para o autor continuar escrevendo bons livros e a editora a investir mais ainda neste tipo de literatura.

Aproveitem!