4 ms·

A collection of books, talks, and papers on security engineering

161 points by veeralpatel979 6y ago

veeralpatel979 6y ago
OP here. I'm very interested in two things: thinking about new types of security tools and studying how different systems, especially those that are not computer related, are secured. This repo is for people who also fall into the second camp and are curious about how prisons are secured, how museums are secured, etc. And the techniques used to do this systematically -- kill chains, failure analysis, and so on. Happy to hear your feedback, and sorry if it's a bit disorganized!
- kinow 6y ago
  Created an issue about a ToC, as it would be helpful when looking for things in that list. But looks really good, thanks for creating and sharing it. I like reading post mortem posts about security incidents too. There's a repo in GitHub that I follow: https://github.com/danluu/post-mortems https://github.com/danluu/post-mortems A great source for what to do, what to avoid, etc. Not only for security.
  - dijksterhuis 6y ago
    So many config failures! As an aside -- do you know of any good forensics / incident response books/resources for learning the fundamentals? Seen some books/courses but they're often the "download this open source library and run these commands" ilk. Spotted this, but no reviews: https://www.amazon.co.uk/gp/aw/d/183864900X/ https://www.amazon.co.uk/gp/aw/d/183864900X/
    - veeralpatel979 6y ago
      check out Kevin Mandia's book!
      - dijksterhuis 6y ago
        Thanks for the tip!
roland35 6y ago
As a new security engineer, thank you! I also believe security engineering is not just abiutbweb apps but applies to everything. So far the things I've learned have opened my eyes to a lot of things, such as seeing someone share a Google doc with history enabled (could possibly leak information from a previous revision) to sharing the least amount of information as necessary in my interactions. All I need is to get a yubi key now!
scott31 6y ago
for small values of "largest"
dijksterhuis 6y ago
That Adam Shostack Threat Modelling book is top knotch. Nice collection. Thanks for sharing.

OP here. I'm very interested in two things: thinking about new types of security tools and studying how different systems, especially those that are not computer related, are secured. This repo is for people who also fall into the second camp and are curious about how prisons are secured, how museums are secured, etc. And the techniques used to do this systematically -- kill chains, failure analysis, and so on. Happy to hear your feedback, and sorry if it's a bit disorganized!

kinow 6y ago
Created an issue about a ToC, as it would be helpful when looking for things in that list. But looks really good, thanks for creating and sharing it. I like reading post mortem posts about security incidents too. There's a repo in GitHub that I follow: https://github.com/danluu/post-mortems https://github.com/danluu/post-mortems A great source for what to do, what to avoid, etc. Not only for security.
- dijksterhuis 6y ago
  So many config failures! As an aside -- do you know of any good forensics / incident response books/resources for learning the fundamentals? Seen some books/courses but they're often the "download this open source library and run these commands" ilk. Spotted this, but no reviews: https://www.amazon.co.uk/gp/aw/d/183864900X/ https://www.amazon.co.uk/gp/aw/d/183864900X/
  - veeralpatel979 6y ago
    check out Kevin Mandia's book!
    - dijksterhuis 6y ago
      Thanks for the tip!

roland35 6y ago

As a new security engineer, thank you! I also believe security engineering is not just abiutbweb apps but applies to everything. So far the things I've learned have opened my eyes to a lot of things, such as seeing someone share a Google doc with history enabled (could possibly leak information from a previous revision) to sharing the least amount of information as necessary in my interactions. All I need is to get a yubi key now!

scott31 6y ago

for small values of "largest"

dijksterhuis 6y ago

That Adam Shostack Threat Modelling book is top knotch. Nice collection. Thanks for sharing.