Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Careers & People

9/9/2014
05:30 PM
Marilyn Cohodas
Marilyn Cohodas
Slideshows
Connect Directly
Twitter
LinkedIn
RSS
E-Mail
50%
50%

InfoSec Book Club: Whats On Your Fall Reading List?

Dark Reading community members share the books that inform and inspire their decisions and interactions as security professionals.
Previous
1 of 11
Next

I don’t know about you but when I see the yellow school buses rolling and the days start getting shorter, my biological clock tells me it’s time to put away the trashy summer novels and dive into some serious reading to psyche me up for the big-fourth quarter push at work.

But what to read? In the search for some great recommendations, I reached out to members of the Dark Reading community. I asked them to share the titles of books that have informed and inspired them in their day to day decisions and interactions as a security professional.

The selection criteria was wide open. They could recommend a technical tome, a novel, or a work of non-fiction with a business, management or political focus. The primary consideration was how they applied what they read to their job as a security practitioner.

(Image: By Work Projects Administration Poster Collection [Public domain], via Wikimedia Commons)
(Image: By Work Projects Administration Poster Collection [Public domain], via Wikimedia Commons)

Here’s our list. But it’s just a beginning. Be sure to add your own recommendations and reasons in the comments.

 

 

Marilyn has been covering technology for business, government, and consumer audiences for over 20 years. Prior to joining UBM, Marilyn worked for nine years as editorial director at TechTarget Inc., where she launched six Websites for IT managers and administrators supporting ... View Full Bio

Previous
1 of 11
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
mhasib
100%
0%
mhasib,
User Rank: Apprentice
9/25/2014 | 8:27:38 PM
Re: Good Reading
The second edition of my book Cybersecurity Leadership: Powering the Modern Organization was released this month. It deals with the people and governance aspects of cybersecurity and provides a leadership model to engage everyone in an organization into a culture of cybersecurity. 
ODA155
50%
50%
ODA155,
User Rank: Ninja
9/22/2014 | 1:59:32 PM
Re: Good Reading
Hi Kelly,

I was just thinking about putting in an order on Amazon for that, but the Audio CD version was not listed, I should check B&N.  But here is something that I was also looking at that should tie-in pretty nicely with your recommendation.

 

@War: The Rise of the Military-Internet Complex Hardcover – November 11, 2014
by Shane Harris

 

 
Marilyn Cohodas
50%
50%
Marilyn Cohodas,
User Rank: Strategist
9/16/2014 | 8:35:18 AM
Re: Surviving on a Diet of Poisoned Fruit: Reducing the National Security Risks of Americas Cyber Dependencies
Thanks for the book recommendation, @PaulH698. The author certainly has the credentials to make a strong case! Among them: Vice Chair of the Board of Trustees of The RAND Corporation, member of the Defense Policy Board and The President's Intelligence Advisory Board, a Director of the Center for a New American Security and from the spring of 2007 through the Presidential election of 2008, Dr. Danzig was a senior advisor to Senator Obama on national security issues and he was the 71st Secretary of the Navy. 

You can find a link to a PDF or Kindle version of Surviving on a Diet of Poisoned Fruit here:

http://www.cnas.org/surviving-diet-poisoned-fruit.

 

 
PaulH698
50%
50%
PaulH698,
User Rank: Apprentice
9/15/2014 | 11:49:14 PM
Surviving on a Diet of Poisoned Fruit: Reducing the National Security Risks of Americas Cyber Dependencies
It is free. Available in .pdf, kindle and tablet formats. While written from an American viepoint robably the best overview of what democratic nations need to do to preserve the benefits of an open Internet. Google the title in order to find it.

'"Surviving on a Diet of Poisoned Fruit: Reducing the National Security Risks of America's Cyber Dependencies" by the Honorable Richard Danzig offers key insights about how to improve U.S. national security policymaking to address cyber insecurity. In the report, the author examines existing information technology security weaknesses and provides nine specific recommendations for the U.S. government and others to cope with these insecurities.'
Marilyn Cohodas
0%
100%
Marilyn Cohodas,
User Rank: Strategist
9/11/2014 | 11:32:02 AM
Re: Good Reading
I loved The Lowlands, but Cory Doctorow's Homeland sounds intriguing. I'm putting it on my to read list.

Keep your book recommendations coming! They're great. 
Kelly Jackson Higgins
50%
50%
Kelly Jackson Higgins,
User Rank: Strategist
9/11/2014 | 10:47:41 AM
Re: Good Reading
I'm looking forward to reading Kim Zetter's "Countdown to Zero Day: Stuxnet and the Launch of the World's First Digital Weapon," which comes out in November. 
theb0x
50%
50%
theb0x,
User Rank: Ninja
9/11/2014 | 10:29:50 AM
Re: Good Reading
A must read: Ghost in the Wires by Kevin Mitnick.
aws0513
50%
50%
aws0513,
User Rank: Ninja
9/11/2014 | 10:22:44 AM
Good Reading
That is quite a good list of books.  Three of them I have already delved.
One book that I treat as a personal reading requirement every year is The Effective Executive by Peter Drucker.

The Effective Executive was first published in 1966, but the content in the book is timeless.  At a short ~200 pages in size, the book is pure sage advice for anyone who is in a leadership or management role.  The concepts in the book are foundational and it is my opinion that anyone who aspires to become a leader in their trade, whatever it may be, read and adopt the concepts and practices it provides.  At approximately $10 USD, the price is very reasonable.

I re-read the book every year as a mental "reset" for my management skills.  It is easy for any of us to get wrapped around the axle on unproductive or less important things.  It is my opinion that The Effective Executive can help anyone in any trade rethink the drink in regards to priorities and resource management.
Where Businesses Waste Endpoint Security Budgets
Kelly Sheridan, Staff Editor, Dark Reading,  7/15/2019
US Mayors Commit to Just Saying No to Ransomware
Robert Lemos, Contributing Writer,  7/16/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: Now this is the worst micromanagment I've seen.
Current Issue
Building and Managing an IT Security Operations Program
As cyber threats grow, many organizations are building security operations centers (SOCs) to improve their defenses. In this Tech Digest you will learn tips on how to get the most out of a SOC in your organization - and what to do if you can't afford to build one.
Flash Poll
The State of IT Operations and Cybersecurity Operations
The State of IT Operations and Cybersecurity Operations
Your enterprise's cyber risk may depend upon the relationship between the IT team and the security team. Heres some insight on what's working and what isn't in the data center.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-17210
PUBLISHED: 2019-07-20
An issue was discovered in PrinterOn Central Print Services (CPS) through 4.1.4. The core components that create and launch a print job do not perform complete verification of the session cookie that is supplied to them. As a result, an attacker with guest/pseudo-guest level permissions can bypass t...
CVE-2019-12934
PUBLISHED: 2019-07-20
An issue was discovered in the wp-code-highlightjs plugin through 0.6.2 for WordPress. wp-admin/options-general.php?page=wp-code-highlight-js allows CSRF, as demonstrated by an XSS payload in the hljs_additional_css parameter.
CVE-2019-9229
PUBLISHED: 2019-07-20
An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A to F7.20A.251. An internal interface exposed to the link-local address 169.254.254.253 allows attackers in the local network to access multiple quagga VTYs. Attackers can...
CVE-2019-12815
PUBLISHED: 2019-07-19
An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE-2015-3306.
CVE-2019-13569
PUBLISHED: 2019-07-19
A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system.