Ben Rothke
Senior Information Security Manager, Tapad
Ben Rothke is a New York City-based Senior Information Security Manager with Tapad and has over 20 years of industry experience in information systems security and privacy. His areas of expertise are risk management and mitigation, security and privacy regulatory issues, design & implementation of systems security, encryption, cryptography, and security policy development. Ben is the author of Computer Security - 20 Things Every Employee Should Know (McGraw-Hill) and writes book reviews for the RSA Conference blog, Cybersecurity Canon and Security Management magazine. He is a frequent speaker at industry conferences, and like all good security pros, has several certifications.
blog
Ben's Book of the Month: Review of "Cyberinsurance Policy"
On January 17, 2023
blog
Ben's Book of the Month: Review of "Privacy Is Hard and Seven Other Myths"
On December 8, 2022
blog
Ben's Book of the Month: Review of "Tracers in the Dark"
On November 16, 2022
blog
blog
Ben's Book of the Month: Review of "If It's Smart, It's Vulnerable"
On September 15, 2022
blog
Ben’s Book of the Month: Review of “The Art of Cyberwarfare”
On August 17, 2022
blog
Ben’s Book of the Month: Review of “Visualizing Google Cloud”
On July 22, 2022
presentation
blog
blog
blog
Ben's Book of the Month: Review of "The Security Hippie"
On March 16, 2022
blog
blog
Ben's Book of the Month: Review of "Navigating the Cybersecurity Career Path"
On December 31, 2021
blog
Ben's Book of the Month: Review of "Ransomware Protection Playbook"
On November 30, 2021
Webcast
blog
Ben's Book of the Month: Review of "Do No Harm"
On July 30, 2021
blog
Ben’s Books of the Month: A Hat Trick of Information Security Titles
On June 30, 2021
blog
Ben’s Book of the Month: May 2021 Book Review
On May 31, 2021
blog
Ben's Book of the Month: "Hacking Multifactor Authentication"
On February 28, 2021
blog
Ben’s Book of the Month: Review of “Alice and Bob Learn Application Security”
On January 31, 2021
blog
Book review: "The Cyber Attack Survival Manual"
On January 26, 2021
blog
blog
blog
blog
Book review: Stiennon On Security: Collected Essays Volume 1
On July 17, 2020
blog
blog
Book Review: PCI DSS: An Integrated Data Security Standard Guide
On June 23, 2020
blog
Ben's Book of The Month: Review of "The Digital Big Bang"
On May 29, 2020
blog
blog
blog
Bens Book of the Month Review of How to Manage Cybersecurity Risk
On February 28, 2020
blog
blog
Book Review: "SAP Cybersecurity for CISO"
On January 15, 2020
blog
Ben's Book of the Month: Review of "Cryptography Apocalypse"
On December 30, 2019
blog
Ben's Book of the Month: Review of "Permanent Record"
On November 26, 2019
blog
Book review: The Official (ISC)² Guide to the CISSP CBK Reference
On June 18, 2019
blog
Ben's Book Review: "The Linux Command Line: A Complete Introduction"
On April 12, 2019
blog
blog
blog
blog
Millions, Billions, Zillions Defending Yourself in a World of Too Many
On December 17, 2018
blog
Engineering Trustworthy Systems: Get Cybersecurity Design Right the First Time
On September 28, 2018
blog
blog
presentation
presentation
35 Days to GDPR. Even If You Prepared, Is Your Firm Truly Ready?
On April 17, 2018
presentation
Ransomware and Destructive Attacks
On April 16, 2018
blog
Ben's Book of the Month: Review of "Securing DevOps: Safe Services in The Cloud"
On February 28, 2018
blog
Book Review: The Woman Who Smashed Codes
On January 19, 2018
blog
blog
Book review: Serious Cryptography: A Practical Introduction to Modern Encryption
On December 13, 2017
blog
blog
blog
blog
Ben's Book of the Month: Review of "The CISO Journey"
On August 31, 2017
blog
The Hardware Hacker: Adventures in Making and Breaking Hardware
On July 17, 2017
blog
blog
NTP Security: A Quick-Start Guide
On May 2, 2017
blog
blog
Ben's Book of the Month: Review of "Hospital and Healthcare Security"
On February 28, 2017
blog
Audio Content Security: Attack Analysis on Audio Watermarking
On February 21, 2017
presentation
Countering Cyberespionage
On February 14, 2017
blog
The Security Reading Room: The Best Information Security Books of 2016
On February 5, 2017
blog
Ransomware: Defending Against Digital Extortion
On January 11, 2017
blog
blog
Secure Data Deletion
On November 30, 2016
blog
DNS Security: Defending the Domain Name System
On November 22, 2016
blog
Hack-Proof Your Life Now! The New Cybersecurity Rules
On November 2, 2016
blog
Cybersecurity and Applied Mathematics
On October 26, 2016
blog
blog
Obfuscation: A User's Guide for Privacy and Protest
On October 6, 2016
blog
Cyber-Physical Attack Recovery Procedures: A Step-by-Step Preparation and Response Guide
On September 25, 2016
blog
Bitcoin and Cryptocurrency Technologies: A Comprehensive Introduction
On September 6, 2016
blog
Infrastructure as Code: Managing Servers in the Cloud
On August 19, 2016
blog
Insider Threat: Prevention, Detection, Mitigation, and Deterrence
On August 1, 2016
blog
blog
Pinpoint: How GPS Is Changing Technology, Culture, and Our Minds
On July 5, 2016
blog
blog
blog
Breakthroughs in Decision Science and Risk Analysis
On May 3, 2016
blog
Hadoop Security: Protecting Your Big Data Platform
On May 2, 2016
blog
Hacking for Dummies: Fifth Edition
On April 26, 2016
blog
blog
Dark Territory: The Secret History of Cyber War
On April 13, 2016
blog
blog
The Car Hacker's Handbook: A Guide for the Penetration Tester
On March 26, 2016
blog
blog
blog
Achieving Digital Trust: The New Rules for Business at the Speed of Light
On February 16, 2016
blog
Essential Cybersecurity Science: Build, Test, and Evaluate Secure Systems
On January 19, 2016
blog
Encryption Made Simple for Lawyers
On January 6, 2016
blog
The Security Reading Room: The Best Information Security Books of 2015
On December 23, 2015
blog
Lights Out: A Cyberattack, A Nation Unprepared, Surviving the Aftermath
On December 2, 2015
blog
Managing Online Risk: Apps, Mobile, and Social Media Security
On December 1, 2015
blog
Security Operations Center: Building, Operating, and Maintaining your SOC
On November 30, 2015
blog
blog
The Network Security Test Lab: A Step-by-Step Guide
On November 4, 2015
blog
Network Attacks and Exploitation: A Framework
On October 2, 2015
blog
Augmented Reality Law, Privacy, and Ethics: Law, Society, and Emerging AR Technologies
On September 19, 2015
blog
Introduction to Social Media Investigation
On August 28, 2015
blog
blog
Digital Identity Management
On August 6, 2015
blog
How Not To Be Hacked: The Definitive Guide for Regular People
On July 30, 2015
blog
Cloud Computing Design Patterns
On July 13, 2015
blog
blog
blog
blog
blog
Statistics Done Wrong: The Woefully Complete Guide
On April 8, 2015
blog
blog
Measures and Metrics in Corporate Security
On March 18, 2015
blog
blog
Social Media Security: Leveraging Social Networking While Mitigating Risk
On February 3, 2015
blog
Designing and Building a Security Operations Center
On January 28, 2015
blog
PRAGMATIC Security Metrics - Applying Metametrics to Information Security
On January 27, 2015
blog
The Practical Guide to HIPAA Privacy and Security Compliance
On January 25, 2015
blog
Enterprise Software Security: A Confluence of Disciplines
On January 15, 2015
blog
Cyber Crime and Cyber Terrorism Investigator's Handbook
On January 5, 2015
blog
The best information security book of 2014 and some other excellent ones
On December 29, 2014
blog
Fire in the Valley: The Birth and Death of the Personal Computer
On December 18, 2014
blog
blog
Bulletproof SSL and TLS
On November 24, 2014
blog
Countdown to Zero Day: Stuxnet and the Launch of the World's First Digital Weapon
On November 10, 2014
blog
Measuring and Managing Information Risk: A FAIR Approach
On October 27, 2014
blog
Official (ISC)2 Guide to the CCFP CBK
On October 21, 2014
blog
Hate Crimes in Cyberspace
On October 14, 2014
blog
Pre-review: Measuring and Managing Information Risk: A FAIR Approach
On October 5, 2014
blog
Targeted Cyber Attacks: Multi-staged Attacks Driven by Exploits and Malware
On September 22, 2014
blog
Architecting the Cloud: Design Decisions for Cloud Computing Service Models
On September 8, 2014
blog
CERT C Coding Standard: 98 Rules for Developing Safe, Reliable, and Secure Systems.
On September 1, 2014
blog
Social Engineering in IT Security: Tools, Tactics, and Techniques
On August 21, 2014
blog
Carry On: Sound Advice from Schneier on Security
On August 11, 2014
blog
Introduction to Cyber-Warfare: A Multidisciplinary Approach
On August 4, 2014
blog
Security Awareness: Applying Practical Security in Your World
On July 22, 2014
blog
Data-Driven Security: Analysis, Visualization and Dashboards
On July 7, 2014
blog
Cyber Crime, Security and Digital Intelligence
On June 30, 2014
blog
blog
blog
3 Excellent New Information Security Books - May 2014
On May 21, 2014
blog
The CISSP Companion Handbook
On May 15, 2014
blog
Two new basics books from Syngress
On May 13, 2014
blog
blog
Unmasking the Social Engineer: The Human Element of Security
On April 13, 2014
blog
blog
Cyber Attack, CyberCrime, CyberWarfare - CyberComplacency
On March 31, 2014
blog
Threat Modeling: Designing for Security
On March 3, 2014
blog
The Best New Books from RSA Conference 2014
On February 27, 2014
blog
Brainstorming and Beyond: A User-Centered Design Method
On January 26, 2014
blog
The Digital Crown: Winning at Content on the Web
On January 13, 2014
blog
Job Reconnaissance: Using Hacking Skills to Win the Job Hunt Game
On January 6, 2014
blog
Introduction to Computer Networks & Cybersecurity
On January 2, 2014
blog
Digital Archaeology: The Art and Science of Digital Forensics
On December 23, 2013
blog
Engineering Safe and Secure Software Systems
On December 9, 2013
blog
Information Security Governance Simplified: From the Boardroom to the Keyboard
On December 2, 2013
blog
Digital Outcasts: Moving Technology Forward without Leaving People Behind
On November 25, 2013
blog
FISMA Compliance Handbook
On November 17, 2013
blog
Testing Cloud Services: How to Test SaaS, PaaS & IaaS
On October 29, 2013
blog
Secret History: The Story of Cryptology
On October 16, 2013
blog
Java Coding Guidelines: 75 Recommendations for Reliable and Secure Programs
On October 8, 2013
blog
Gupta & Brooks: Using Social Media for Global Security
On October 1, 2013
blog
SCADA and Me
On September 12, 2013
blog
blog
blog
Practical Anonymity: Hiding in Plain Sight Online
On August 29, 2013
blog
Hacking Exposed Mobile: Security Secrets & Solutions
On August 26, 2013
blog
Secret History: The Story of Cryptology
On August 15, 2013
blog
The Healthy Programmer: Get Fit, Feel Better, and Keep Coding
On August 12, 2013
blog
blog
Hacking Exposed Mobile Security Secrets and Solutions
On August 5, 2013
blog
The Healthy Programmer: Get Fit, Feel Better and Keep Coding
On August 1, 2013
blog
Present Yourself: Using SlideShare to Grow Your Business
On July 29, 2013
blog
Cloud Computing: Theory and Practice
On July 22, 2013
blog
blog
Cloud Computing: Concepts, Technology & Architecture
On July 7, 2013
blog
blog
blog
Locked Down: Information Security for Lawyers
On May 20, 2013
blog
The Chinese Information War
On May 13, 2013
blog
The Plateau Effect: Getting from Stuck to Success
On May 13, 2013
blog
Secure Coding in C and C++
On May 7, 2013
blog
Cybersecurity: Public Sector Threats and Responses
On May 2, 2013
blog
Applied Information Security: A Hands-on Approach
On April 22, 2013
blog
The Death of the Internet - Markus Jakobsson
On April 15, 2013
blog
Introduction to Computer Networks and Cybersecurity
On March 28, 2013
blog
Managing Risk and Information Security: Protect to Enable
On March 20, 2013
blog
PRAGMATIC Security Metrics: Applying Metametrics to Information Security
On March 14, 2013
blog
The Hacker's Guide to OS X: Exploiting OS X from the Root Up
On March 5, 2013
blog
The Phoenix Project
On February 28, 2013
blog
Two new security certification review guides from Microsoft Press
On February 21, 2013
blog
The Design of Rijndael: AES - The Advanced Encryption Standard
On February 19, 2013
blog
Security Engineering: A Guide to Building Dependable Distributed Systems
On February 15, 2013
blog
Using Social Media for Global Security
On February 11, 2013
blog
Low Tech Hacking: Street Smarts for Security Professionals
On February 7, 2013
blog
Computer Security Literacy: Staying Safe in a Digital World
On February 4, 2013
blog
Hacking For Dummies – 4th edition
On January 30, 2013
blog
A Gift of Fire: Social, Legal, and Ethical Issues for Computing Technology
On January 21, 2013
blog
Official (ISC)2 Guide to the CISSP CBK – 3rd edition
On January 16, 2013
blog
blog
Web Application Defender's Cookbook: Battling Hackers and Protecting Users
On January 3, 2013
blog
Virtualization Security: Protecting Virtualized Environments
On December 27, 2012
blog
blog
Engineering Safe and Secure Software Systems
On December 20, 2012
blog
Bad Data Handbook: Cleaning Up The Data So You Can Get Back To Work
On December 18, 2012
blog
Gatekeeper: What's New in OS X Mountain Lion Security
On December 10, 2012
blog
Two great lockpicking books from Deviant Ollam
On December 5, 2012
blog
Smart Grid Security: An End-to-End View of Security in the New Electrical Grid
On December 3, 2012
blog
Two new CISSP books from Shon Harris
On November 20, 2012
blog
Reverse Deception: Organized Cyber Threat Counter-Exploitation
On November 12, 2012
blog
blog
Ethics of Big Data: Balancing Risk and Innovation
On November 1, 2012
blog
Information Security Management Handbook – 2012 edition
On October 25, 2012
blog
Two new lockpicking books from Deviant Ollam
On October 18, 2012
blog
Everyday Cryptography: Fundamental Principles and Applications
On October 15, 2012
blog
CISSP Study Guide, Second Edition
On October 10, 2012
blog
blog
ISO27001 in a Windows Environment
On October 3, 2012
blog
Two new SQL security books from Syngress
On September 27, 2012
blog
Digital Forensics for Handheld Devices
On September 24, 2012
blog
Preview - Everyday Cryptography: Fundamental Principles and Applications
On September 19, 2012
blog
CISSP for Dummies
On September 14, 2012
blog
Preview - Digital Forensics for Handheld Devices
On August 30, 2012
blog
Illustrated Guide to Home Forensic Science Experiments: All Lab, No Lecture
On August 22, 2012
blog
Best Practices for the Destruction of Digital Data
On August 15, 2012
blog
Navigating Social Media Legal Risks: Safeguarding Your Business
On August 14, 2012
blog
The Rise of the Virtual-Plagiarist
On August 13, 2012
blog
Hacking Exposed 7: Network Security Secrets & Solutions
On August 6, 2012
blog
blog
The 7 Qualities of Highly Secure Software
On July 16, 2012
blog
blog
Cyber Attacks Protecting National Infrastructure
On July 9, 2012
blog
Network Forensics: Tracking Hackers through Cyberspace
On June 28, 2012
blog
blog
Wireless Network Security A Beginner's Guide
On June 18, 2012
blog
Security and Privacy for Microsoft Office 2010 Users
On May 24, 2012
blog
Elementary Information Security
On May 18, 2012
blog
blog
Fitness for Geeks: Real Science, Great Nutrition and Good Health
On April 30, 2012
blog
The Woman Who Wasn't There: The True Story of an Incredible Deception
On April 23, 2012
blog
Preview - Cyber Security Policy Guidebook
On April 20, 2012
blog
Preview - Information Security Policies Made Easy Version 12
On April 16, 2012
blog
blog
Microsoft Manual of Style
On March 21, 2012
blog
The Shpantzer Interview Technique
On March 20, 2012
blog
In memory of Hal Tipton
On March 18, 2012
blog
Preview - Cyber Attacks: Protecting National Infrastructure
On March 11, 2012
blog
blog
Preview - Microsoft Manual of Style
On February 27, 2012
blog
Liars and Outliers: Enabling the Trust that Society Needs to Thrive
On February 22, 2012
blog
Preventing Good People From Doing Bad Things: Implementing Least Privilege
On February 12, 2012
blog
Preview - Low Tech Hacking: Street Smarts for Security Professionals
On February 6, 2012
blog
Preview - Elementary Information Security
On February 5, 2012
blog
To the Cloud: Cloud Powering an Enterprise
On January 31, 2012
blog
The Tangled Web: A Guide to Securing Modern Web Applications
On January 25, 2012
blog
Preview - Liars and Outliers: Enabling the Trust that Society Needs to Thrive
On January 23, 2012
blog
blog
Preview - The Tangled Web: A Guide to Securing Modern Web Applications
On January 8, 2012
blog
Metasploit: The Penetration Tester's Guide
On January 3, 2012
blog
blog
Preview - Privacy and Big Data
On December 11, 2011
blog
Preview - Mindfire: Big Ideas for Curious Minds
On December 4, 2011
blog
Goedel's Way: Exploits into an undecidable world
On December 1, 2011
blog
The CERT Oracle Secure Coding Standard for Java
On November 30, 2011
blog
Preview - Sousveillance, Media and Strategic Political Communication: Iraq, USA, UK
On November 25, 2011
blog
Digital Forensics for Legal Professionals
On November 20, 2011
blog
Securing the Clicks Network Security in the Age of Social Media
On November 4, 2011
blog
Preview - Auditing Cloud Computing: A Security and Privacy Guide
On November 3, 2011
blog
There's a sucker born every minute – and charlatans to make sure they pay for it
On October 27, 2011
blog
blog
blog
Preview - The CERT Oracle Secure Coding Standard for Java
On October 11, 2011
blog
Preview - Two new pen test books from Syngress
On October 6, 2011
blog
Preview - The Cloud Security Rules
On October 5, 2011
blog
Digital Evidence and Computer Crime: Forensic Science, Computers and the Internet
On September 21, 2011
blog
Two new information security books from Syngress
On September 13, 2011
blog
Preview - Biometrics in Identity Management: Concepts to Applications
On September 8, 2011
blog
Preview - Metasploit: The Penetration Tester's Guide
On September 4, 2011
blog
Ghost in the Wires: My Adventures as the World's Most Wanted Hacker
On August 26, 2011
blog
blog
Securing the Cloud: Cloud Computer Security Techniques and Tactics
On July 19, 2011
blog
Lessons from LIGATT
On July 11, 2011
blog
blog
Preview - Cisco Firewalls
On July 1, 2011
blog
3 new forensics books from Syngress
On June 29, 2011
blog
Preview - Digital Evidence and Computer Crime
On June 28, 2011
blog
blog
Vulnerability Management
On May 13, 2011
blog
Global Terrorism and New Media: The Post-Al Qaeda Generation
On May 1, 2011
blog
Network Security Auditing
On April 27, 2011
blog
Preview - Adaptive Security Management Architecture
On April 8, 2011
blog
blog
Kevin Mitnick is coming out with a new book
On March 29, 2011
blog
Social Engineering: The Art of Human Hacking
On March 9, 2011
blog
blog
Security Information and Event Management (SIEM) Implementation
On February 24, 2011
blog
On the road, live from RSA 2011
On February 22, 2011
blog
The top 5 security books at RSA 2011 from the Security Reading Room
On February 18, 2011
blog
blog
Vein Pattern Recognition: A Privacy-Enhancing Biometric
On February 3, 2011
blog
Computer Incident Response and Product Security
On January 24, 2011
blog
Preview - Implementing ISO27001 in a Windows Environment
On January 13, 2011
blog
Securing the Smart Grid: Next Generation Power Grid Security
On January 5, 2011
blog
Preview - Computer Incident Response and Product Security
On December 17, 2010
blog
Deceptive email - this time from SAP
On December 7, 2010
blog
Preview - Securing the Smart Grid: Next Generation Power Grid Security
On December 7, 2010
blog
Quick look - Understanding Amazon book reviews
On December 6, 2010
blog
Cryptography Engineering: Design Principles and Practical Applications
On December 1, 2010
blog
VeriSign marketing - they listen
On November 18, 2010
blog
Security Strategy: From Requirements to Reality
On November 15, 2010
blog
CyberForensics: Understanding Information Security Investigations
On October 27, 2010
blog
What’s with VeriSign and their deceptive marketing tactics?
On October 26, 2010
blog
Preview - CyberForensics: Understanding Information Security Investigations
On October 20, 2010
blog
blog
Is writing certification guides a replacement for psychotherapy?
On October 6, 2010
blog
blog
Preview - Hacking For Dummies - 3rd edition
On September 8, 2010
blog
The Executive MBA in Information Security
On September 1, 2010
blog
Is 2010 the year of the plagiarized security book?
On August 19, 2010
blog
blog
Best Damn Cybercrime and Digital Forensics Book Period
On July 1, 2010
blog
Outsourcing SAP Operations
On June 21, 2010
blog
The Psychology of Safety
On June 18, 2010
blog
Fair use, plagiarism and the World’s No. 1 Hacker book
On June 14, 2010
blog
How To Become The Worlds No. 1 Hacker
On June 10, 2010
blog
Webinar June 29 - Effective Data Destruction Practices
On June 9, 2010
blog
Webinar June 8 - Effective Data Destruction Practices
On June 3, 2010
blog
Books from SAP Press
On May 25, 2010
blog
blog
The Illusion of Due Diligence
On April 28, 2010
blog
blog
How to build a safety culture in three steps
On April 14, 2010
blog
blog
blog
My slides from the PechaKucha (PK) Happy Hour
On March 5, 2010
blog
Tales from the Info Security Reading Room
On March 4, 2010
blog
blog
The Myth of Homeland Security
On February 25, 2010
blog
Building Secure Software: How to Avoid Security Problems the Right Way
On February 25, 2010
blog
blog
On deceptive email I get from VeriSign
On February 19, 2010
blog
Security Warrior
On February 17, 2010
blog
Forensic Discovery
On February 16, 2010
blog
Managing an Information Security and Privacy Awareness and Training Program
On February 12, 2010
blog
Cryptography for Dummies
On February 11, 2010
blog
Hacking For Dummies
On February 10, 2010
blog
Outsourcing Information Security
On February 9, 2010
blog
Mapping Security: The Corporate Security Sourcebook for Today's Global Economy
On February 8, 2010
blog
blog
blog
The German Enigma Cipher Machine: Beginnings, Success, and Ultimate Failure
On February 1, 2010
blog
blog
Expert Network Time Protocol: An Experience in Time with NTP
On January 28, 2010
blog
Brute Force: Cracking the Data Encryption Standard
On January 28, 2010
blog
blog
The Social Media Marketing Book
On January 22, 2010
blog
blog
Cryptography in the Database: The Last Line of Defense
On January 22, 2010
blog
Digital Identity
On January 22, 2010
blog
Securing IM and P2P Applications for the Enterprise
On January 21, 2010
blog
Web Mapping Illustrated: Using Open Source GIS Toolkits
On January 21, 2010
blog
Free Lunch 2010: Why Public Algorithms Beat the Alternative
On January 21, 2010
blog
The Software Vulnerability Guide
On January 19, 2010
blog
19 Deadly Sins of Software Security: Programming Flaws and How to Fix Them
On January 19, 2010
blog
Computer Network Time Synchronization: The Network Time Protocol
On January 19, 2010
blog
RSA Crypto FAQ
On January 18, 2010
blog
e-Book: PCI Compliance for Dummies
On January 18, 2010
blog
Handbook of Applied Cryptography - available free online
On January 18, 2010
blog
PGP & GPG: Email for the Practical Paranoid
On January 14, 2010
blog
Protect Your Windows Network: From Perimeter to Data
On January 14, 2010
blog
How to Cheat at Managing Information Security
On January 14, 2010
blog
The Privacy Management Toolkit
On January 13, 2010
blog
blog
Information Security Policies Made Easy
On January 13, 2010
blog
Why Software Sucks...and What You Can Do About It
On January 12, 2010
blog
In Search of Stupidity: Over Twenty Years of High Tech Marketing Disasters
On January 12, 2010
blog
blog
Preview - The Social Media Marketing Book
On January 8, 2010
blog
Enterprise Security for the Executive: Setting the Tone from the Top
On January 6, 2010
blog
blog
Security Power Tools
On January 5, 2010
blog
Terminal Chaos: Why U.S. Air Travel Is Broken and How to Fix It
On January 5, 2010
blog
blog
Software Security: Building Security In
On January 4, 2010
blog
Stealing Your Life: The Ultimate Identity Theft Prevention Plan
On January 4, 2010
blog
Security Metrics: Replacing Fear, Uncertainty, and Doubt
On January 4, 2010
blog
blog
Plane Simple Truth: Clearing the air on aviation's environmental impact
On December 31, 2009
blog
Forensic Accounting and Fraud Investigation for Non-Experts
On December 31, 2009
blog
Touching the World of Angels; How My Daughter's Short Life Changed Mine
On December 30, 2009
blog
Building an Effective Information Security Policy Architecture
On December 30, 2009
blog
Counterdeception Principles and Applications for National Security
On December 30, 2009
blog
The New School of Information Security
On December 28, 2009
blog
Geekonomics: The Real Cost of Insecure Software
On December 28, 2009
blog
Biometrics For Dummies
On December 23, 2009
blog
Exploiting Online Games: Cheating Massively Distributed Systems
On December 23, 2009
blog
Transportation and Cargo Security: Threats and Solutions
On December 22, 2009
blog
Trick or Treatment: The Undeniable Facts about Alternative Medicine
On December 22, 2009
blog
CISO Leadership: Essential Principles for Success
On December 22, 2009
blog
blog
Schneier on Security - the best of rock star of information security
On December 21, 2009
blog
Computer Security: 20 Things Every Employee Should Know
On December 21, 2009
blog
The nmap book: valuable book about an invaluable security tool
On December 18, 2009
blog
Googling Security: How Much Does Google Know About You?
On December 18, 2009
blog
Big brother, much ado about nothing
On December 17, 2009
blog
Dan Geer gets it
On December 17, 2009
blog
The Pragmatic CSO - 12 Steps to Being a Security Master
On December 16, 2009
blog
blog
Beautiful Security: Leading Security Experts Explain How They Think
On December 16, 2009
blog
Information Risk And Security: Preventing And Investigating Workplace Computer Crime
On December 16, 2009
blog
The Geek Atlas: 128 Places Where Science and Technology Come Alive
On December 15, 2009
blog
What do alcoholic pilots and hackers have in common?
On December 14, 2009
blog
Tetraktys is not the world's first cryptographic thriller
On December 14, 2009
blog
The Myths of Security: What the Computer Security Industry Doesn't Want You to Know
On December 14, 2009
blog
Welcome to the Security Reading Room blog
On December 12, 2009
blog
The best information security book I ever read is….
On December 12, 2009
blog
Book review of Confessions of a Public Speaker
On December 12, 2009
blog
Ben's Book of the Month: Review of "Cyberinsurance Policy"
On January 17, 2023
blog
Ben's Book of the Month: Review of "Privacy Is Hard and Seven Other Myths"
On December 8, 2022
blog
Ben's Book of the Month: Review of "Tracers in the Dark"
On November 16, 2022
blog
blog
Ben's Book of the Month: Review of "If It's Smart, It's Vulnerable"
On September 15, 2022
blog
Ben’s Book of the Month: Review of “The Art of Cyberwarfare”
On August 17, 2022
blog
Ben’s Book of the Month: Review of “Visualizing Google Cloud”
On July 22, 2022
presentation
blog
blog
blog
Ben's Book of the Month: Review of "The Security Hippie"
On March 16, 2022
blog
blog
Ben's Book of the Month: Review of "Navigating the Cybersecurity Career Path"
On December 31, 2021
blog
Ben's Book of the Month: Review of "Ransomware Protection Playbook"
On November 30, 2021
Webcast
blog
Ben's Book of the Month: Review of "Do No Harm"
On July 30, 2021
blog
Ben’s Books of the Month: A Hat Trick of Information Security Titles
On June 30, 2021
blog
Ben’s Book of the Month: May 2021 Book Review
On May 31, 2021
blog
Ben's Book of the Month: "Hacking Multifactor Authentication"
On February 28, 2021
blog
Ben’s Book of the Month: Review of “Alice and Bob Learn Application Security”
On January 31, 2021
blog
Book review: "The Cyber Attack Survival Manual"
On January 26, 2021
blog
blog
blog
blog
Book review: Stiennon On Security: Collected Essays Volume 1
On July 17, 2020
blog
blog
Book Review: PCI DSS: An Integrated Data Security Standard Guide
On June 23, 2020
blog
Ben's Book of The Month: Review of "The Digital Big Bang"
On May 29, 2020
blog
blog
blog
Bens Book of the Month Review of How to Manage Cybersecurity Risk
On February 28, 2020
blog
blog
Book Review: "SAP Cybersecurity for CISO"
On January 15, 2020
blog
Ben's Book of the Month: Review of "Cryptography Apocalypse"
On December 30, 2019
blog
Ben's Book of the Month: Review of "Permanent Record"
On November 26, 2019
blog
Book review: The Official (ISC)² Guide to the CISSP CBK Reference
On June 18, 2019
blog
Ben's Book Review: "The Linux Command Line: A Complete Introduction"
On April 12, 2019
blog
blog
blog
blog
Millions, Billions, Zillions Defending Yourself in a World of Too Many
On December 17, 2018
blog
Engineering Trustworthy Systems: Get Cybersecurity Design Right the First Time
On September 28, 2018
blog
blog
presentation
presentation
35 Days to GDPR. Even If You Prepared, Is Your Firm Truly Ready?
On April 17, 2018
presentation
Ransomware and Destructive Attacks
On April 16, 2018
blog
Ben's Book of the Month: Review of "Securing DevOps: Safe Services in The Cloud"
On February 28, 2018
blog
Book Review: The Woman Who Smashed Codes
On January 19, 2018
blog
blog
Book review: Serious Cryptography: A Practical Introduction to Modern Encryption
On December 13, 2017
blog
blog
blog
blog
Ben's Book of the Month: Review of "The CISO Journey"
On August 31, 2017
blog
The Hardware Hacker: Adventures in Making and Breaking Hardware
On July 17, 2017
blog
blog
NTP Security: A Quick-Start Guide
On May 2, 2017
blog
blog
Ben's Book of the Month: Review of "Hospital and Healthcare Security"
On February 28, 2017
blog
Audio Content Security: Attack Analysis on Audio Watermarking
On February 21, 2017
presentation
Countering Cyberespionage
On February 14, 2017
blog
The Security Reading Room: The Best Information Security Books of 2016
On February 5, 2017
blog
Ransomware: Defending Against Digital Extortion
On January 11, 2017
blog
blog
Secure Data Deletion
On November 30, 2016
blog
DNS Security: Defending the Domain Name System
On November 22, 2016
blog
Hack-Proof Your Life Now! The New Cybersecurity Rules
On November 2, 2016
blog
Cybersecurity and Applied Mathematics
On October 26, 2016
blog
blog
Obfuscation: A User's Guide for Privacy and Protest
On October 6, 2016
blog
Cyber-Physical Attack Recovery Procedures: A Step-by-Step Preparation and Response Guide
On September 25, 2016
blog
Bitcoin and Cryptocurrency Technologies: A Comprehensive Introduction
On September 6, 2016
blog
Infrastructure as Code: Managing Servers in the Cloud
On August 19, 2016
blog
Insider Threat: Prevention, Detection, Mitigation, and Deterrence
On August 1, 2016
blog
blog
Pinpoint: How GPS Is Changing Technology, Culture, and Our Minds
On July 5, 2016
blog
blog
blog
Breakthroughs in Decision Science and Risk Analysis
On May 3, 2016
blog
Hadoop Security: Protecting Your Big Data Platform
On May 2, 2016
blog
Hacking for Dummies: Fifth Edition
On April 26, 2016
blog
blog
Dark Territory: The Secret History of Cyber War
On April 13, 2016
blog
blog
The Car Hacker's Handbook: A Guide for the Penetration Tester
On March 26, 2016
blog
blog
blog
Achieving Digital Trust: The New Rules for Business at the Speed of Light
On February 16, 2016
blog
Essential Cybersecurity Science: Build, Test, and Evaluate Secure Systems
On January 19, 2016
blog
Encryption Made Simple for Lawyers
On January 6, 2016
blog
The Security Reading Room: The Best Information Security Books of 2015
On December 23, 2015
blog
Lights Out: A Cyberattack, A Nation Unprepared, Surviving the Aftermath
On December 2, 2015
blog
Managing Online Risk: Apps, Mobile, and Social Media Security
On December 1, 2015
blog
Security Operations Center: Building, Operating, and Maintaining your SOC
On November 30, 2015
blog
blog
The Network Security Test Lab: A Step-by-Step Guide
On November 4, 2015
blog
Network Attacks and Exploitation: A Framework
On October 2, 2015
blog
Augmented Reality Law, Privacy, and Ethics: Law, Society, and Emerging AR Technologies
On September 19, 2015
blog
Introduction to Social Media Investigation
On August 28, 2015
blog
blog
Digital Identity Management
On August 6, 2015
blog
How Not To Be Hacked: The Definitive Guide for Regular People
On July 30, 2015
blog
Cloud Computing Design Patterns
On July 13, 2015
blog
blog
blog
blog
blog
Statistics Done Wrong: The Woefully Complete Guide
On April 8, 2015
blog
blog
Measures and Metrics in Corporate Security
On March 18, 2015
blog
blog
Social Media Security: Leveraging Social Networking While Mitigating Risk
On February 3, 2015
blog
Designing and Building a Security Operations Center
On January 28, 2015
blog
PRAGMATIC Security Metrics - Applying Metametrics to Information Security
On January 27, 2015
blog
The Practical Guide to HIPAA Privacy and Security Compliance
On January 25, 2015
blog
Enterprise Software Security: A Confluence of Disciplines
On January 15, 2015
blog
Cyber Crime and Cyber Terrorism Investigator's Handbook
On January 5, 2015
blog
The best information security book of 2014 and some other excellent ones
On December 29, 2014
blog
Fire in the Valley: The Birth and Death of the Personal Computer
On December 18, 2014
blog
blog
Bulletproof SSL and TLS
On November 24, 2014
blog
Countdown to Zero Day: Stuxnet and the Launch of the World's First Digital Weapon
On November 10, 2014
blog
Measuring and Managing Information Risk: A FAIR Approach
On October 27, 2014
blog
Official (ISC)2 Guide to the CCFP CBK
On October 21, 2014
blog
Hate Crimes in Cyberspace
On October 14, 2014
blog
Pre-review: Measuring and Managing Information Risk: A FAIR Approach
On October 5, 2014
blog
Targeted Cyber Attacks: Multi-staged Attacks Driven by Exploits and Malware
On September 22, 2014
blog
Architecting the Cloud: Design Decisions for Cloud Computing Service Models
On September 8, 2014
blog
CERT C Coding Standard: 98 Rules for Developing Safe, Reliable, and Secure Systems.
On September 1, 2014
blog
Social Engineering in IT Security: Tools, Tactics, and Techniques
On August 21, 2014
blog
Carry On: Sound Advice from Schneier on Security
On August 11, 2014
blog
Introduction to Cyber-Warfare: A Multidisciplinary Approach
On August 4, 2014
blog
Security Awareness: Applying Practical Security in Your World
On July 22, 2014
blog
Data-Driven Security: Analysis, Visualization and Dashboards
On July 7, 2014
blog
Cyber Crime, Security and Digital Intelligence
On June 30, 2014
blog
blog
blog
3 Excellent New Information Security Books - May 2014
On May 21, 2014
blog
The CISSP Companion Handbook
On May 15, 2014
blog
Two new basics books from Syngress
On May 13, 2014
blog
blog
Unmasking the Social Engineer: The Human Element of Security
On April 13, 2014
blog
blog
Cyber Attack, CyberCrime, CyberWarfare - CyberComplacency
On March 31, 2014
blog
Threat Modeling: Designing for Security
On March 3, 2014
blog
The Best New Books from RSA Conference 2014
On February 27, 2014
blog
Brainstorming and Beyond: A User-Centered Design Method
On January 26, 2014
blog
The Digital Crown: Winning at Content on the Web
On January 13, 2014
blog
Job Reconnaissance: Using Hacking Skills to Win the Job Hunt Game
On January 6, 2014
blog
Introduction to Computer Networks & Cybersecurity
On January 2, 2014
blog
Digital Archaeology: The Art and Science of Digital Forensics
On December 23, 2013
blog
Engineering Safe and Secure Software Systems
On December 9, 2013
blog
Information Security Governance Simplified: From the Boardroom to the Keyboard
On December 2, 2013
blog
Digital Outcasts: Moving Technology Forward without Leaving People Behind
On November 25, 2013
blog
FISMA Compliance Handbook
On November 17, 2013
blog
Testing Cloud Services: How to Test SaaS, PaaS & IaaS
On October 29, 2013
blog
Secret History: The Story of Cryptology
On October 16, 2013
blog
Java Coding Guidelines: 75 Recommendations for Reliable and Secure Programs
On October 8, 2013
blog
Gupta & Brooks: Using Social Media for Global Security
On October 1, 2013
blog
SCADA and Me
On September 12, 2013
blog
blog
blog
Practical Anonymity: Hiding in Plain Sight Online
On August 29, 2013
blog
Hacking Exposed Mobile: Security Secrets & Solutions
On August 26, 2013
blog
Secret History: The Story of Cryptology
On August 15, 2013
blog
The Healthy Programmer: Get Fit, Feel Better, and Keep Coding
On August 12, 2013
blog
blog
Hacking Exposed Mobile Security Secrets and Solutions
On August 5, 2013
blog
The Healthy Programmer: Get Fit, Feel Better and Keep Coding
On August 1, 2013
blog
Present Yourself: Using SlideShare to Grow Your Business
On July 29, 2013
blog
Cloud Computing: Theory and Practice
On July 22, 2013
blog
blog
Cloud Computing: Concepts, Technology & Architecture
On July 7, 2013
blog
blog
blog
Locked Down: Information Security for Lawyers
On May 20, 2013
blog
The Chinese Information War
On May 13, 2013
blog
The Plateau Effect: Getting from Stuck to Success
On May 13, 2013
blog
Secure Coding in C and C++
On May 7, 2013
blog
Cybersecurity: Public Sector Threats and Responses
On May 2, 2013
blog
Applied Information Security: A Hands-on Approach
On April 22, 2013
blog
The Death of the Internet - Markus Jakobsson
On April 15, 2013
blog
Introduction to Computer Networks and Cybersecurity
On March 28, 2013
blog
Managing Risk and Information Security: Protect to Enable
On March 20, 2013
blog
PRAGMATIC Security Metrics: Applying Metametrics to Information Security
On March 14, 2013
blog
The Hacker's Guide to OS X: Exploiting OS X from the Root Up
On March 5, 2013
blog
The Phoenix Project
On February 28, 2013
blog
Two new security certification review guides from Microsoft Press
On February 21, 2013
blog
The Design of Rijndael: AES - The Advanced Encryption Standard
On February 19, 2013
blog
Security Engineering: A Guide to Building Dependable Distributed Systems
On February 15, 2013
blog
Using Social Media for Global Security
On February 11, 2013
blog
Low Tech Hacking: Street Smarts for Security Professionals
On February 7, 2013
blog
Computer Security Literacy: Staying Safe in a Digital World
On February 4, 2013
blog
Hacking For Dummies – 4th edition
On January 30, 2013
blog
A Gift of Fire: Social, Legal, and Ethical Issues for Computing Technology
On January 21, 2013
blog
Official (ISC)2 Guide to the CISSP CBK – 3rd edition
On January 16, 2013
blog
blog
Web Application Defender's Cookbook: Battling Hackers and Protecting Users
On January 3, 2013
blog
Virtualization Security: Protecting Virtualized Environments
On December 27, 2012
blog
blog
Engineering Safe and Secure Software Systems
On December 20, 2012
blog
Bad Data Handbook: Cleaning Up The Data So You Can Get Back To Work
On December 18, 2012
blog
Gatekeeper: What's New in OS X Mountain Lion Security
On December 10, 2012
blog
Two great lockpicking books from Deviant Ollam
On December 5, 2012
blog
Smart Grid Security: An End-to-End View of Security in the New Electrical Grid
On December 3, 2012
blog
Two new CISSP books from Shon Harris
On November 20, 2012
blog
Reverse Deception: Organized Cyber Threat Counter-Exploitation
On November 12, 2012
blog
blog
Ethics of Big Data: Balancing Risk and Innovation
On November 1, 2012
blog
Information Security Management Handbook – 2012 edition
On October 25, 2012
blog
Two new lockpicking books from Deviant Ollam
On October 18, 2012
blog
Everyday Cryptography: Fundamental Principles and Applications
On October 15, 2012
blog
CISSP Study Guide, Second Edition
On October 10, 2012
blog
blog
ISO27001 in a Windows Environment
On October 3, 2012
blog
Two new SQL security books from Syngress
On September 27, 2012
blog
Digital Forensics for Handheld Devices
On September 24, 2012
blog
Preview - Everyday Cryptography: Fundamental Principles and Applications
On September 19, 2012
blog
CISSP for Dummies
On September 14, 2012
blog
Preview - Digital Forensics for Handheld Devices
On August 30, 2012
blog
Illustrated Guide to Home Forensic Science Experiments: All Lab, No Lecture
On August 22, 2012
blog
Best Practices for the Destruction of Digital Data
On August 15, 2012
blog
Navigating Social Media Legal Risks: Safeguarding Your Business
On August 14, 2012
blog
The Rise of the Virtual-Plagiarist
On August 13, 2012
blog
Hacking Exposed 7: Network Security Secrets & Solutions
On August 6, 2012
blog
blog
The 7 Qualities of Highly Secure Software
On July 16, 2012
blog
blog
Cyber Attacks Protecting National Infrastructure
On July 9, 2012
blog
Network Forensics: Tracking Hackers through Cyberspace
On June 28, 2012
blog
blog
Wireless Network Security A Beginner's Guide
On June 18, 2012
blog
Security and Privacy for Microsoft Office 2010 Users
On May 24, 2012
blog
Elementary Information Security
On May 18, 2012
blog
blog
Fitness for Geeks: Real Science, Great Nutrition and Good Health
On April 30, 2012
blog
The Woman Who Wasn't There: The True Story of an Incredible Deception
On April 23, 2012
blog
Preview - Cyber Security Policy Guidebook
On April 20, 2012
blog
Preview - Information Security Policies Made Easy Version 12
On April 16, 2012
blog
blog
Microsoft Manual of Style
On March 21, 2012
blog
The Shpantzer Interview Technique
On March 20, 2012
blog
In memory of Hal Tipton
On March 18, 2012
blog
Preview - Cyber Attacks: Protecting National Infrastructure
On March 11, 2012
blog
blog
Preview - Microsoft Manual of Style
On February 27, 2012
blog
Liars and Outliers: Enabling the Trust that Society Needs to Thrive
On February 22, 2012
blog
Preventing Good People From Doing Bad Things: Implementing Least Privilege
On February 12, 2012
blog
Preview - Low Tech Hacking: Street Smarts for Security Professionals
On February 6, 2012
blog
Preview - Elementary Information Security
On February 5, 2012
blog
To the Cloud: Cloud Powering an Enterprise
On January 31, 2012
blog
The Tangled Web: A Guide to Securing Modern Web Applications
On January 25, 2012
blog
Preview - Liars and Outliers: Enabling the Trust that Society Needs to Thrive
On January 23, 2012
blog
blog
Preview - The Tangled Web: A Guide to Securing Modern Web Applications
On January 8, 2012
blog
Metasploit: The Penetration Tester's Guide
On January 3, 2012
blog
blog
Preview - Privacy and Big Data
On December 11, 2011
blog
Preview - Mindfire: Big Ideas for Curious Minds
On December 4, 2011
blog
Goedel's Way: Exploits into an undecidable world
On December 1, 2011
blog
The CERT Oracle Secure Coding Standard for Java
On November 30, 2011
blog
Preview - Sousveillance, Media and Strategic Political Communication: Iraq, USA, UK
On November 25, 2011
blog
Digital Forensics for Legal Professionals
On November 20, 2011
blog
Securing the Clicks Network Security in the Age of Social Media
On November 4, 2011
blog
Preview - Auditing Cloud Computing: A Security and Privacy Guide
On November 3, 2011
blog
There's a sucker born every minute – and charlatans to make sure they pay for it
On October 27, 2011
blog
blog
blog
Preview - The CERT Oracle Secure Coding Standard for Java
On October 11, 2011
blog
Preview - Two new pen test books from Syngress
On October 6, 2011
blog
Preview - The Cloud Security Rules
On October 5, 2011
blog
Digital Evidence and Computer Crime: Forensic Science, Computers and the Internet
On September 21, 2011
blog
Two new information security books from Syngress
On September 13, 2011
blog
Preview - Biometrics in Identity Management: Concepts to Applications
On September 8, 2011
blog
Preview - Metasploit: The Penetration Tester's Guide
On September 4, 2011
blog
Ghost in the Wires: My Adventures as the World's Most Wanted Hacker
On August 26, 2011
blog
blog
Securing the Cloud: Cloud Computer Security Techniques and Tactics
On July 19, 2011
blog
Lessons from LIGATT
On July 11, 2011
blog
blog
Preview - Cisco Firewalls
On July 1, 2011
blog
3 new forensics books from Syngress
On June 29, 2011
blog
Preview - Digital Evidence and Computer Crime
On June 28, 2011
blog
blog
Vulnerability Management
On May 13, 2011
blog
Global Terrorism and New Media: The Post-Al Qaeda Generation
On May 1, 2011
blog
Network Security Auditing
On April 27, 2011
blog
Preview - Adaptive Security Management Architecture
On April 8, 2011
blog
blog
Kevin Mitnick is coming out with a new book
On March 29, 2011
blog
Social Engineering: The Art of Human Hacking
On March 9, 2011
blog
blog
Security Information and Event Management (SIEM) Implementation
On February 24, 2011
blog
On the road, live from RSA 2011
On February 22, 2011
blog
The top 5 security books at RSA 2011 from the Security Reading Room
On February 18, 2011
blog
blog
Vein Pattern Recognition: A Privacy-Enhancing Biometric
On February 3, 2011
blog
Computer Incident Response and Product Security
On January 24, 2011
blog
Preview - Implementing ISO27001 in a Windows Environment
On January 13, 2011
blog
Securing the Smart Grid: Next Generation Power Grid Security
On January 5, 2011
blog
Preview - Computer Incident Response and Product Security
On December 17, 2010
blog
Deceptive email - this time from SAP
On December 7, 2010
blog
Preview - Securing the Smart Grid: Next Generation Power Grid Security
On December 7, 2010
blog
Quick look - Understanding Amazon book reviews
On December 6, 2010
blog
Cryptography Engineering: Design Principles and Practical Applications
On December 1, 2010
blog
VeriSign marketing - they listen
On November 18, 2010
blog
Security Strategy: From Requirements to Reality
On November 15, 2010
blog
CyberForensics: Understanding Information Security Investigations
On October 27, 2010
blog
What’s with VeriSign and their deceptive marketing tactics?
On October 26, 2010
blog
Preview - CyberForensics: Understanding Information Security Investigations
On October 20, 2010
blog
blog
Is writing certification guides a replacement for psychotherapy?
On October 6, 2010
blog
blog
Preview - Hacking For Dummies - 3rd edition
On September 8, 2010
blog
The Executive MBA in Information Security
On September 1, 2010
blog
Is 2010 the year of the plagiarized security book?
On August 19, 2010
blog
blog
Best Damn Cybercrime and Digital Forensics Book Period
On July 1, 2010
blog
Outsourcing SAP Operations
On June 21, 2010
blog
The Psychology of Safety
On June 18, 2010
blog
Fair use, plagiarism and the World’s No. 1 Hacker book
On June 14, 2010
blog
How To Become The Worlds No. 1 Hacker
On June 10, 2010
blog
Webinar June 29 - Effective Data Destruction Practices
On June 9, 2010
blog
Webinar June 8 - Effective Data Destruction Practices
On June 3, 2010
blog
Books from SAP Press
On May 25, 2010
blog
blog
The Illusion of Due Diligence
On April 28, 2010
blog
blog
How to build a safety culture in three steps
On April 14, 2010
blog
blog
blog
My slides from the PechaKucha (PK) Happy Hour
On March 5, 2010
blog
Tales from the Info Security Reading Room
On March 4, 2010
blog
blog
The Myth of Homeland Security
On February 25, 2010
blog
Building Secure Software: How to Avoid Security Problems the Right Way
On February 25, 2010
blog
blog
On deceptive email I get from VeriSign
On February 19, 2010
blog
Security Warrior
On February 17, 2010
blog
Forensic Discovery
On February 16, 2010
blog
Managing an Information Security and Privacy Awareness and Training Program
On February 12, 2010
blog
Cryptography for Dummies
On February 11, 2010
blog
Hacking For Dummies
On February 10, 2010
blog
Outsourcing Information Security
On February 9, 2010
blog
Mapping Security: The Corporate Security Sourcebook for Today's Global Economy
On February 8, 2010
blog
blog
blog
The German Enigma Cipher Machine: Beginnings, Success, and Ultimate Failure
On February 1, 2010
blog
blog
Expert Network Time Protocol: An Experience in Time with NTP
On January 28, 2010
blog
Brute Force: Cracking the Data Encryption Standard
On January 28, 2010
blog
blog
The Social Media Marketing Book
On January 22, 2010
blog
blog
Cryptography in the Database: The Last Line of Defense
On January 22, 2010
blog
Digital Identity
On January 22, 2010
blog
Securing IM and P2P Applications for the Enterprise
On January 21, 2010
blog
Web Mapping Illustrated: Using Open Source GIS Toolkits
On January 21, 2010
blog
Free Lunch 2010: Why Public Algorithms Beat the Alternative
On January 21, 2010
blog
The Software Vulnerability Guide
On January 19, 2010
blog
19 Deadly Sins of Software Security: Programming Flaws and How to Fix Them
On January 19, 2010
blog
Computer Network Time Synchronization: The Network Time Protocol
On January 19, 2010
blog
RSA Crypto FAQ
On January 18, 2010
blog
e-Book: PCI Compliance for Dummies
On January 18, 2010
blog
Handbook of Applied Cryptography - available free online
On January 18, 2010
blog
PGP & GPG: Email for the Practical Paranoid
On January 14, 2010
blog
Protect Your Windows Network: From Perimeter to Data
On January 14, 2010
blog
How to Cheat at Managing Information Security
On January 14, 2010
blog
The Privacy Management Toolkit
On January 13, 2010
blog
blog
Information Security Policies Made Easy
On January 13, 2010
blog
Why Software Sucks...and What You Can Do About It
On January 12, 2010
blog
In Search of Stupidity: Over Twenty Years of High Tech Marketing Disasters
On January 12, 2010
blog
blog
Preview - The Social Media Marketing Book
On January 8, 2010
blog
Enterprise Security for the Executive: Setting the Tone from the Top
On January 6, 2010
blog
blog
Security Power Tools
On January 5, 2010
blog
Terminal Chaos: Why U.S. Air Travel Is Broken and How to Fix It
On January 5, 2010
blog
blog
Software Security: Building Security In
On January 4, 2010
blog
Stealing Your Life: The Ultimate Identity Theft Prevention Plan
On January 4, 2010
blog
Security Metrics: Replacing Fear, Uncertainty, and Doubt
On January 4, 2010
blog
blog
Plane Simple Truth: Clearing the air on aviation's environmental impact
On December 31, 2009
blog
Forensic Accounting and Fraud Investigation for Non-Experts
On December 31, 2009
blog
Touching the World of Angels; How My Daughter's Short Life Changed Mine
On December 30, 2009
blog
Building an Effective Information Security Policy Architecture
On December 30, 2009
blog
Counterdeception Principles and Applications for National Security
On December 30, 2009
blog
The New School of Information Security
On December 28, 2009
blog
Geekonomics: The Real Cost of Insecure Software
On December 28, 2009
blog
Biometrics For Dummies
On December 23, 2009
blog
Exploiting Online Games: Cheating Massively Distributed Systems
On December 23, 2009
blog
Transportation and Cargo Security: Threats and Solutions
On December 22, 2009
blog
Trick or Treatment: The Undeniable Facts about Alternative Medicine
On December 22, 2009
blog
CISO Leadership: Essential Principles for Success
On December 22, 2009
blog
blog
Schneier on Security - the best of rock star of information security
On December 21, 2009
blog
Computer Security: 20 Things Every Employee Should Know
On December 21, 2009
blog
The nmap book: valuable book about an invaluable security tool
On December 18, 2009
blog
Googling Security: How Much Does Google Know About You?
On December 18, 2009
blog
Big brother, much ado about nothing
On December 17, 2009
blog
Dan Geer gets it
On December 17, 2009
blog
The Pragmatic CSO - 12 Steps to Being a Security Master
On December 16, 2009
blog
blog
Beautiful Security: Leading Security Experts Explain How They Think
On December 16, 2009
blog
Information Risk And Security: Preventing And Investigating Workplace Computer Crime
On December 16, 2009
blog
The Geek Atlas: 128 Places Where Science and Technology Come Alive
On December 15, 2009
blog
What do alcoholic pilots and hackers have in common?
On December 14, 2009
blog
Tetraktys is not the world's first cryptographic thriller
On December 14, 2009
blog
The Myths of Security: What the Computer Security Industry Doesn't Want You to Know
On December 14, 2009
blog
Welcome to the Security Reading Room blog
On December 12, 2009
blog
The best information security book I ever read is….
On December 12, 2009
blog
Book review of Confessions of a Public Speaker
On December 12, 2009
blog
Ben's Book of the Month: Review of "Cyberinsurance Policy"
On January 17, 2023
blog
Ben's Book of the Month: Review of "Privacy Is Hard and Seven Other Myths"
On December 8, 2022
blog
Ben's Book of the Month: Review of "Tracers in the Dark"
On November 16, 2022
blog
blog
Ben's Book of the Month: Review of "If It's Smart, It's Vulnerable"
On September 15, 2022
blog
Ben’s Book of the Month: Review of “The Art of Cyberwarfare”
On August 17, 2022
blog
Ben’s Book of the Month: Review of “Visualizing Google Cloud”
On July 22, 2022
presentation
blog
blog
blog
Ben's Book of the Month: Review of "The Security Hippie"
On March 16, 2022
blog
blog
Ben's Book of the Month: Review of "Navigating the Cybersecurity Career Path"
On December 31, 2021
blog
Ben's Book of the Month: Review of "Ransomware Protection Playbook"
On November 30, 2021
Webcast
blog
Ben's Book of the Month: Review of "Do No Harm"
On July 30, 2021
blog
Ben’s Books of the Month: A Hat Trick of Information Security Titles
On June 30, 2021
blog
Ben’s Book of the Month: May 2021 Book Review
On May 31, 2021
blog
Ben's Book of the Month: "Hacking Multifactor Authentication"
On February 28, 2021
blog
Ben’s Book of the Month: Review of “Alice and Bob Learn Application Security”
On January 31, 2021
blog
Book review: "The Cyber Attack Survival Manual"
On January 26, 2021
blog
blog
blog
blog
Book review: Stiennon On Security: Collected Essays Volume 1
On July 17, 2020
blog
blog
Book Review: PCI DSS: An Integrated Data Security Standard Guide
On June 23, 2020
blog
Ben's Book of The Month: Review of "The Digital Big Bang"
On May 29, 2020
blog
blog
blog
Bens Book of the Month Review of How to Manage Cybersecurity Risk
On February 28, 2020
blog
blog
Book Review: "SAP Cybersecurity for CISO"
On January 15, 2020
blog
Ben's Book of the Month: Review of "Cryptography Apocalypse"
On December 30, 2019
blog
Ben's Book of the Month: Review of "Permanent Record"
On November 26, 2019
blog
Book review: The Official (ISC)² Guide to the CISSP CBK Reference
On June 18, 2019
blog
Ben's Book Review: "The Linux Command Line: A Complete Introduction"
On April 12, 2019
blog
blog
blog
blog
Millions, Billions, Zillions Defending Yourself in a World of Too Many
On December 17, 2018
blog
Engineering Trustworthy Systems: Get Cybersecurity Design Right the First Time
On September 28, 2018
blog
blog
presentation
presentation
35 Days to GDPR. Even If You Prepared, Is Your Firm Truly Ready?
On April 17, 2018
presentation
Ransomware and Destructive Attacks
On April 16, 2018
blog
Ben's Book of the Month: Review of "Securing DevOps: Safe Services in The Cloud"
On February 28, 2018
blog
Book Review: The Woman Who Smashed Codes
On January 19, 2018
blog
blog
Book review: Serious Cryptography: A Practical Introduction to Modern Encryption
On December 13, 2017
blog
blog
blog
blog
Ben's Book of the Month: Review of "The CISO Journey"
On August 31, 2017
blog
The Hardware Hacker: Adventures in Making and Breaking Hardware
On July 17, 2017
blog
blog
NTP Security: A Quick-Start Guide
On May 2, 2017
blog
blog
Ben's Book of the Month: Review of "Hospital and Healthcare Security"
On February 28, 2017
blog
Audio Content Security: Attack Analysis on Audio Watermarking
On February 21, 2017
presentation
Countering Cyberespionage
On February 14, 2017
blog
The Security Reading Room: The Best Information Security Books of 2016
On February 5, 2017
blog
Ransomware: Defending Against Digital Extortion
On January 11, 2017
blog
blog
Secure Data Deletion
On November 30, 2016
blog
DNS Security: Defending the Domain Name System
On November 22, 2016
blog
Hack-Proof Your Life Now! The New Cybersecurity Rules
On November 2, 2016
blog
Cybersecurity and Applied Mathematics
On October 26, 2016
blog
blog
Obfuscation: A User's Guide for Privacy and Protest
On October 6, 2016
blog
Cyber-Physical Attack Recovery Procedures: A Step-by-Step Preparation and Response Guide
On September 25, 2016
blog
Bitcoin and Cryptocurrency Technologies: A Comprehensive Introduction
On September 6, 2016
blog
Infrastructure as Code: Managing Servers in the Cloud
On August 19, 2016
blog
Insider Threat: Prevention, Detection, Mitigation, and Deterrence
On August 1, 2016
blog
blog
Pinpoint: How GPS Is Changing Technology, Culture, and Our Minds
On July 5, 2016
blog
blog
blog
Breakthroughs in Decision Science and Risk Analysis
On May 3, 2016
blog
Hadoop Security: Protecting Your Big Data Platform
On May 2, 2016
blog
Hacking for Dummies: Fifth Edition
On April 26, 2016
blog
blog
Dark Territory: The Secret History of Cyber War
On April 13, 2016
blog
blog
The Car Hacker's Handbook: A Guide for the Penetration Tester
On March 26, 2016
blog
blog
blog
Achieving Digital Trust: The New Rules for Business at the Speed of Light
On February 16, 2016
blog
Essential Cybersecurity Science: Build, Test, and Evaluate Secure Systems
On January 19, 2016
blog
Encryption Made Simple for Lawyers
On January 6, 2016
blog
The Security Reading Room: The Best Information Security Books of 2015
On December 23, 2015
blog
Lights Out: A Cyberattack, A Nation Unprepared, Surviving the Aftermath
On December 2, 2015
blog
Managing Online Risk: Apps, Mobile, and Social Media Security
On December 1, 2015
blog
Security Operations Center: Building, Operating, and Maintaining your SOC
On November 30, 2015
blog
blog
The Network Security Test Lab: A Step-by-Step Guide
On November 4, 2015
blog
Network Attacks and Exploitation: A Framework
On October 2, 2015
blog
Augmented Reality Law, Privacy, and Ethics: Law, Society, and Emerging AR Technologies
On September 19, 2015
blog
Introduction to Social Media Investigation
On August 28, 2015
blog
blog
Digital Identity Management
On August 6, 2015
blog
How Not To Be Hacked: The Definitive Guide for Regular People
On July 30, 2015
blog
Cloud Computing Design Patterns
On July 13, 2015
blog
blog
blog
blog
blog
Statistics Done Wrong: The Woefully Complete Guide
On April 8, 2015
blog
blog
Measures and Metrics in Corporate Security
On March 18, 2015
blog
blog
Social Media Security: Leveraging Social Networking While Mitigating Risk
On February 3, 2015
blog
Designing and Building a Security Operations Center
On January 28, 2015
blog
PRAGMATIC Security Metrics - Applying Metametrics to Information Security
On January 27, 2015
blog
The Practical Guide to HIPAA Privacy and Security Compliance
On January 25, 2015
blog
Enterprise Software Security: A Confluence of Disciplines
On January 15, 2015
blog
Cyber Crime and Cyber Terrorism Investigator's Handbook
On January 5, 2015
blog
The best information security book of 2014 and some other excellent ones
On December 29, 2014
blog
Fire in the Valley: The Birth and Death of the Personal Computer
On December 18, 2014
blog
blog
Bulletproof SSL and TLS
On November 24, 2014
blog
Countdown to Zero Day: Stuxnet and the Launch of the World's First Digital Weapon
On November 10, 2014
blog
Measuring and Managing Information Risk: A FAIR Approach
On October 27, 2014
blog
Official (ISC)2 Guide to the CCFP CBK
On October 21, 2014
blog
Hate Crimes in Cyberspace
On October 14, 2014
blog
Pre-review: Measuring and Managing Information Risk: A FAIR Approach
On October 5, 2014
blog
Targeted Cyber Attacks: Multi-staged Attacks Driven by Exploits and Malware
On September 22, 2014
blog
Architecting the Cloud: Design Decisions for Cloud Computing Service Models
On September 8, 2014
blog
CERT C Coding Standard: 98 Rules for Developing Safe, Reliable, and Secure Systems.
On September 1, 2014
blog
Social Engineering in IT Security: Tools, Tactics, and Techniques
On August 21, 2014
blog
Carry On: Sound Advice from Schneier on Security
On August 11, 2014
blog
Introduction to Cyber-Warfare: A Multidisciplinary Approach
On August 4, 2014
blog
Security Awareness: Applying Practical Security in Your World
On July 22, 2014
blog
Data-Driven Security: Analysis, Visualization and Dashboards
On July 7, 2014
blog
Cyber Crime, Security and Digital Intelligence
On June 30, 2014
blog
blog
blog
3 Excellent New Information Security Books - May 2014
On May 21, 2014
blog
The CISSP Companion Handbook
On May 15, 2014
blog
Two new basics books from Syngress
On May 13, 2014
blog
blog
Unmasking the Social Engineer: The Human Element of Security
On April 13, 2014
blog
blog
Cyber Attack, CyberCrime, CyberWarfare - CyberComplacency
On March 31, 2014
blog
Threat Modeling: Designing for Security
On March 3, 2014
blog
The Best New Books from RSA Conference 2014
On February 27, 2014
blog
Brainstorming and Beyond: A User-Centered Design Method
On January 26, 2014
blog
The Digital Crown: Winning at Content on the Web
On January 13, 2014
blog
Job Reconnaissance: Using Hacking Skills to Win the Job Hunt Game
On January 6, 2014
blog
Introduction to Computer Networks & Cybersecurity
On January 2, 2014
blog
Digital Archaeology: The Art and Science of Digital Forensics
On December 23, 2013
blog
Engineering Safe and Secure Software Systems
On December 9, 2013
blog
Information Security Governance Simplified: From the Boardroom to the Keyboard
On December 2, 2013
blog
Digital Outcasts: Moving Technology Forward without Leaving People Behind
On November 25, 2013
blog
FISMA Compliance Handbook
On November 17, 2013
blog
Testing Cloud Services: How to Test SaaS, PaaS & IaaS
On October 29, 2013
blog
Secret History: The Story of Cryptology
On October 16, 2013
blog
Java Coding Guidelines: 75 Recommendations for Reliable and Secure Programs
On October 8, 2013
blog
Gupta & Brooks: Using Social Media for Global Security
On October 1, 2013
blog
SCADA and Me
On September 12, 2013
blog
blog
blog
Practical Anonymity: Hiding in Plain Sight Online
On August 29, 2013
blog
Hacking Exposed Mobile: Security Secrets & Solutions
On August 26, 2013
blog
Secret History: The Story of Cryptology
On August 15, 2013
blog
The Healthy Programmer: Get Fit, Feel Better, and Keep Coding
On August 12, 2013
blog
blog
Hacking Exposed Mobile Security Secrets and Solutions
On August 5, 2013
blog
The Healthy Programmer: Get Fit, Feel Better and Keep Coding
On August 1, 2013
blog
Present Yourself: Using SlideShare to Grow Your Business
On July 29, 2013
blog
Cloud Computing: Theory and Practice
On July 22, 2013
blog
blog
Cloud Computing: Concepts, Technology & Architecture
On July 7, 2013
blog
blog
blog
Locked Down: Information Security for Lawyers
On May 20, 2013
blog
The Chinese Information War
On May 13, 2013
blog
The Plateau Effect: Getting from Stuck to Success
On May 13, 2013
blog
Secure Coding in C and C++
On May 7, 2013
blog
Cybersecurity: Public Sector Threats and Responses
On May 2, 2013
blog
Applied Information Security: A Hands-on Approach
On April 22, 2013
blog
The Death of the Internet - Markus Jakobsson
On April 15, 2013
blog
Introduction to Computer Networks and Cybersecurity
On March 28, 2013
blog
Managing Risk and Information Security: Protect to Enable
On March 20, 2013
blog
PRAGMATIC Security Metrics: Applying Metametrics to Information Security
On March 14, 2013
blog
The Hacker's Guide to OS X: Exploiting OS X from the Root Up
On March 5, 2013
blog
The Phoenix Project
On February 28, 2013
blog
Two new security certification review guides from Microsoft Press
On February 21, 2013
blog
The Design of Rijndael: AES - The Advanced Encryption Standard
On February 19, 2013
blog
Security Engineering: A Guide to Building Dependable Distributed Systems
On February 15, 2013
blog
Using Social Media for Global Security
On February 11, 2013
blog
Low Tech Hacking: Street Smarts for Security Professionals
On February 7, 2013
blog
Computer Security Literacy: Staying Safe in a Digital World
On February 4, 2013
blog
Hacking For Dummies – 4th edition
On January 30, 2013
blog
A Gift of Fire: Social, Legal, and Ethical Issues for Computing Technology
On January 21, 2013
blog
Official (ISC)2 Guide to the CISSP CBK – 3rd edition
On January 16, 2013
blog
blog
Web Application Defender's Cookbook: Battling Hackers and Protecting Users
On January 3, 2013
blog
Virtualization Security: Protecting Virtualized Environments
On December 27, 2012
blog
blog
Engineering Safe and Secure Software Systems
On December 20, 2012
blog
Bad Data Handbook: Cleaning Up The Data So You Can Get Back To Work
On December 18, 2012
blog
Gatekeeper: What's New in OS X Mountain Lion Security
On December 10, 2012
blog
Two great lockpicking books from Deviant Ollam
On December 5, 2012
blog
Smart Grid Security: An End-to-End View of Security in the New Electrical Grid
On December 3, 2012
blog
Two new CISSP books from Shon Harris
On November 20, 2012
blog
Reverse Deception: Organized Cyber Threat Counter-Exploitation
On November 12, 2012
blog
blog
Ethics of Big Data: Balancing Risk and Innovation
On November 1, 2012
blog
Information Security Management Handbook – 2012 edition
On October 25, 2012
blog
Two new lockpicking books from Deviant Ollam
On October 18, 2012
blog
Everyday Cryptography: Fundamental Principles and Applications
On October 15, 2012
blog
CISSP Study Guide, Second Edition
On October 10, 2012
blog
blog
ISO27001 in a Windows Environment
On October 3, 2012
blog
Two new SQL security books from Syngress
On September 27, 2012
blog
Digital Forensics for Handheld Devices
On September 24, 2012
blog
Preview - Everyday Cryptography: Fundamental Principles and Applications
On September 19, 2012
blog
CISSP for Dummies
On September 14, 2012
blog
Preview - Digital Forensics for Handheld Devices
On August 30, 2012
blog
Illustrated Guide to Home Forensic Science Experiments: All Lab, No Lecture
On August 22, 2012
blog
Best Practices for the Destruction of Digital Data
On August 15, 2012
blog
Navigating Social Media Legal Risks: Safeguarding Your Business
On August 14, 2012
blog
The Rise of the Virtual-Plagiarist
On August 13, 2012
blog
Hacking Exposed 7: Network Security Secrets & Solutions
On August 6, 2012
blog
blog
The 7 Qualities of Highly Secure Software
On July 16, 2012
blog
blog
Cyber Attacks Protecting National Infrastructure
On July 9, 2012
blog
Network Forensics: Tracking Hackers through Cyberspace
On June 28, 2012
blog
blog
Wireless Network Security A Beginner's Guide
On June 18, 2012
blog
Security and Privacy for Microsoft Office 2010 Users
On May 24, 2012
blog
Elementary Information Security
On May 18, 2012
blog
blog
Fitness for Geeks: Real Science, Great Nutrition and Good Health
On April 30, 2012
blog
The Woman Who Wasn't There: The True Story of an Incredible Deception
On April 23, 2012
blog
Preview - Cyber Security Policy Guidebook
On April 20, 2012
blog
Preview - Information Security Policies Made Easy Version 12
On April 16, 2012
blog
blog
Microsoft Manual of Style
On March 21, 2012
blog
The Shpantzer Interview Technique
On March 20, 2012
blog
In memory of Hal Tipton
On March 18, 2012
blog
Preview - Cyber Attacks: Protecting National Infrastructure
On March 11, 2012
blog
blog
Preview - Microsoft Manual of Style
On February 27, 2012
blog
Liars and Outliers: Enabling the Trust that Society Needs to Thrive
On February 22, 2012
blog
Preventing Good People From Doing Bad Things: Implementing Least Privilege
On February 12, 2012
blog
Preview - Low Tech Hacking: Street Smarts for Security Professionals
On February 6, 2012
blog
Preview - Elementary Information Security
On February 5, 2012
blog
To the Cloud: Cloud Powering an Enterprise
On January 31, 2012
blog
The Tangled Web: A Guide to Securing Modern Web Applications
On January 25, 2012
blog
Preview - Liars and Outliers: Enabling the Trust that Society Needs to Thrive
On January 23, 2012
blog
blog
Preview - The Tangled Web: A Guide to Securing Modern Web Applications
On January 8, 2012
blog
Metasploit: The Penetration Tester's Guide
On January 3, 2012
blog
blog
Preview - Privacy and Big Data
On December 11, 2011
blog
Preview - Mindfire: Big Ideas for Curious Minds
On December 4, 2011
blog
Goedel's Way: Exploits into an undecidable world
On December 1, 2011
blog
The CERT Oracle Secure Coding Standard for Java
On November 30, 2011
blog
Preview - Sousveillance, Media and Strategic Political Communication: Iraq, USA, UK
On November 25, 2011
blog
Digital Forensics for Legal Professionals
On November 20, 2011
blog
Securing the Clicks Network Security in the Age of Social Media
On November 4, 2011
blog
Preview - Auditing Cloud Computing: A Security and Privacy Guide
On November 3, 2011
blog
There's a sucker born every minute – and charlatans to make sure they pay for it
On October 27, 2011
blog
blog
blog
Preview - The CERT Oracle Secure Coding Standard for Java
On October 11, 2011
blog
Preview - Two new pen test books from Syngress
On October 6, 2011
blog
Preview - The Cloud Security Rules
On October 5, 2011
blog
Digital Evidence and Computer Crime: Forensic Science, Computers and the Internet
On September 21, 2011
blog
Two new information security books from Syngress
On September 13, 2011
blog
Preview - Biometrics in Identity Management: Concepts to Applications
On September 8, 2011
blog
Preview - Metasploit: The Penetration Tester's Guide
On September 4, 2011
blog
Ghost in the Wires: My Adventures as the World's Most Wanted Hacker
On August 26, 2011
blog
blog
Securing the Cloud: Cloud Computer Security Techniques and Tactics
On July 19, 2011
blog
Lessons from LIGATT
On July 11, 2011
blog
blog
Preview - Cisco Firewalls
On July 1, 2011
blog
3 new forensics books from Syngress
On June 29, 2011
blog
Preview - Digital Evidence and Computer Crime
On June 28, 2011
blog
blog
Vulnerability Management
On May 13, 2011
blog
Global Terrorism and New Media: The Post-Al Qaeda Generation
On May 1, 2011
blog
Network Security Auditing
On April 27, 2011
blog
Preview - Adaptive Security Management Architecture
On April 8, 2011
blog
blog
Kevin Mitnick is coming out with a new book
On March 29, 2011
blog
Social Engineering: The Art of Human Hacking
On March 9, 2011
blog
blog
Security Information and Event Management (SIEM) Implementation
On February 24, 2011
blog
On the road, live from RSA 2011
On February 22, 2011
blog
The top 5 security books at RSA 2011 from the Security Reading Room
On February 18, 2011
blog
blog
Vein Pattern Recognition: A Privacy-Enhancing Biometric
On February 3, 2011
blog
Computer Incident Response and Product Security
On January 24, 2011
blog
Preview - Implementing ISO27001 in a Windows Environment
On January 13, 2011
blog
Securing the Smart Grid: Next Generation Power Grid Security
On January 5, 2011
blog
Preview - Computer Incident Response and Product Security
On December 17, 2010
blog
Deceptive email - this time from SAP
On December 7, 2010
blog
Preview - Securing the Smart Grid: Next Generation Power Grid Security
On December 7, 2010
blog
Quick look - Understanding Amazon book reviews
On December 6, 2010
blog
Cryptography Engineering: Design Principles and Practical Applications
On December 1, 2010
blog
VeriSign marketing - they listen
On November 18, 2010
blog
Security Strategy: From Requirements to Reality
On November 15, 2010
blog
CyberForensics: Understanding Information Security Investigations
On October 27, 2010
blog
What’s with VeriSign and their deceptive marketing tactics?
On October 26, 2010
blog
Preview - CyberForensics: Understanding Information Security Investigations
On October 20, 2010
blog
blog
Is writing certification guides a replacement for psychotherapy?
On October 6, 2010
blog
blog
Preview - Hacking For Dummies - 3rd edition
On September 8, 2010
blog
The Executive MBA in Information Security
On September 1, 2010
blog
Is 2010 the year of the plagiarized security book?
On August 19, 2010
blog
blog
Best Damn Cybercrime and Digital Forensics Book Period
On July 1, 2010
blog
Outsourcing SAP Operations
On June 21, 2010
blog
The Psychology of Safety
On June 18, 2010
blog
Fair use, plagiarism and the World’s No. 1 Hacker book
On June 14, 2010
blog
How To Become The Worlds No. 1 Hacker
On June 10, 2010
blog
Webinar June 29 - Effective Data Destruction Practices
On June 9, 2010
blog
Webinar June 8 - Effective Data Destruction Practices
On June 3, 2010
blog
Books from SAP Press
On May 25, 2010
blog
blog
The Illusion of Due Diligence
On April 28, 2010
blog
blog
How to build a safety culture in three steps
On April 14, 2010
blog
blog
blog
My slides from the PechaKucha (PK) Happy Hour
On March 5, 2010
blog
Tales from the Info Security Reading Room
On March 4, 2010
blog
blog
The Myth of Homeland Security
On February 25, 2010
blog
Building Secure Software: How to Avoid Security Problems the Right Way
On February 25, 2010
blog
blog
On deceptive email I get from VeriSign
On February 19, 2010
blog
Security Warrior
On February 17, 2010
blog
Forensic Discovery
On February 16, 2010
blog
Managing an Information Security and Privacy Awareness and Training Program
On February 12, 2010
blog
Cryptography for Dummies
On February 11, 2010
blog
Hacking For Dummies
On February 10, 2010
blog
Outsourcing Information Security
On February 9, 2010
blog
Mapping Security: The Corporate Security Sourcebook for Today's Global Economy
On February 8, 2010