Recommendations for a book on security?

[kmjt]

Looking for a good up to date book that goes over security (sql injection etc.). Any suggestions?

 

[n4n0]

Maybe find some whitehat Hacking books? Those should be fairly resourceful

 

There are honestly no books that cover the entirety that are up to date, in my findings. I found that the internet is the richest resource.

 

[kmjt]

Maybe find some whitehat Hacking books? Those should be fairly resourceful

Thank!

There are honestly no books that cover the entirety that are up to date, in my findings. I found that the internet is the richest resource.

Yeah thats my main worry. I don't want to waste time reading an outdated book.

 

[SuF]

Thank!





Yeah thats my main worry. I don't want to waste time reading an outdated book.

I mean there are a lot of things like SQL injection or XSS that have remained the same for years. Even if a book doesn't contain everything people thought of this year almost all of the security holes that are found are principals we've know about for a long time.

 

Hackforums is a terrific resource so long as you're not using the information you retrieve for malicious purposes.

 

[Mormaii]

If you're still looking for one here's a good site: https://www.hacksplaining.com/

 

[Ritysayo]

I want to mention; you won't find an updated book on modern day exploits. Security professionals have to watch actively the news, subscribe to ethical hacking websites, and stay up-to-date with the products they attempt to protect.

If you're trying to understand the common hacking methods, you should look into "Hands-On Ethical Hacking and Network Defense" by Michael T. Simpson.

Are you interested in specific types of security? Learning the different levels of encryption could help with understanding data transfer.

You seem to be interested in web server & database security because of the SQL injection comment. If I may suggest, you should study other injections involving XML too. I believe that XML is the future of the web, and it is already used for many mobile applications.

 

[x CRaZyFiST x]

I would thoroughly recommend The Web Application Hackers Handbook