Ben Rothke
Senior Information Security Manager, Tapad
Ben Rothke is a New York City-based Senior Information Security Manager with Tapad and has over 20 years of industry experience in information systems security and privacy. His areas of expertise are risk management and mitigation, security and privacy regulatory issues, design & implementation of systems security, encryption, cryptography, and security policy development. Ben is the author of Computer Security - 20 Things Every Employee Should Know (McGraw-Hill) and writes book reviews for the RSA Conference blog, Cybersecurity Canon and Security Management magazine. He is a frequent speaker at industry conferences, and like all good security pros, has several certifications.
Upcoming Contributions
US 22 Session
blog
blog
Ben's Book of the Month: Review of "Computer Security and the Internet"
By on Apr 07, 2022
blog
Ben's Book of the Month: Review of "The Security Hippie"
By on Mar 16, 2022
blog
blog
blog
Ben's Book of the Month: Review of "Ransomware Protection Playbook"
By on Nov 30, 2021
Webcast
blog
blog
blog
blog
Ben's Book of the Month: Review of "Do No Harm"
By on Jul 30, 2021
blog
Ben’s Books of the Month: A Hat Trick of Information Security Titles
By on Jun 30, 2021
blog
Ben’s Book of the Month: May 2021 Book Review
By on May 31, 2021
blog
Ben's Book of the Month: "Hacking Multifactor Authentication"
By on Feb 28, 2021
blog
blog
Book review: "The Cyber Attack Survival Manual"
By on Jan 26, 2021
blog
blog
blog
blog
blog
blog
blog
blog
Book review: Stiennon On Security: Collected Essays Volume 1
By on Jul 17, 2020
blog
Ben’s Book of the Month: Review of “Data Breaches: Crisis and Opportunity”
By on Jun 30, 2020
blog
Book Review: PCI DSS: An Integrated Data Security Standard Guide
By on Jun 23, 2020
blog
Ben's Book of The Month: Review of "The Digital Big Bang"
By on May 29, 2020
blog
blog
blog
blog
blog
Bens Book of the Month Review of How to Manage Cybersecurity Risk
By on Feb 28, 2020
blog
blog
Book Review: "SAP Cybersecurity for CISO"
By on Jan 15, 2020
blog
Ben's Book of the Month: Review of "Cryptography Apocalypse"
By on Dec 30, 2019
blog
Ben's Book of the Month: Review of "Permanent Record"
By on Nov 26, 2019
blog
blog
blog
blog
blog
blog
Book review: The Official (ISC)² Guide to the CISSP CBK Reference
By on Jun 18, 2019
blog
blog
blog
Ben's Book Review: "The Linux Command Line: A Complete Introduction"
By on Apr 12, 2019
blog
blog
blog
blog
Millions, Billions, Zillions Defending Yourself in a World of Too Many
By on Dec 17, 2018
blog
blog
blog
blog
blog
blog
blog
blog
blog
presentation
presentation
presentation
Ransomware and Destructive Attacks
On Apr 16, 2018
blog
blog
blog
blog
blog
Book Review: The Woman Who Smashed Codes
By on Jan 19, 2018
blog
blog
blog
blog
blog
blog
blog
Ben's Book of the Month: Review of "The CISO Journey"
By on Aug 31, 2017
blog
blog
blog
The Hardware Hacker: Adventures in Making and Breaking Hardware
By on Jul 17, 2017
blog
Ben's Book of the Month: Review of "Information Security Policies Made Easy"
By on Jun 30, 2017
blog
blog
NTP Security: A Quick-Start Guide
By on May 02, 2017
blog
blog
blog
blog
Ben's Book of the Month: Review of "Hospital and Healthcare Security"
By on Feb 28, 2017
blog
Audio Content Security: Attack Analysis on Audio Watermarking
By on Feb 21, 2017
presentation
Countering Cyberespionage
On Feb 14, 2017
blog
The Security Reading Room: The Best Information Security Books of 2016
By on Feb 05, 2017
blog
Ransomware: Defending Against Digital Extortion
By on Jan 11, 2017
blog
blog
blog
Secure Data Deletion
By on Nov 30, 2016
blog
DNS Security: Defending the Domain Name System
By on Nov 22, 2016
blog
Hack-Proof Your Life Now! The New Cybersecurity Rules
By on Nov 02, 2016
blog
Cybersecurity and Applied Mathematics
By on Oct 26, 2016
blog
blog
Obfuscation: A User's Guide for Privacy and Protest
By on Oct 06, 2016
blog
blog
Bitcoin and Cryptocurrency Technologies: A Comprehensive Introduction
By on Sep 06, 2016
blog
Infrastructure as Code: Managing Servers in the Cloud
By on Aug 19, 2016
blog
Insider Threat: Prevention, Detection, Mitigation, and Deterrence
By on Aug 01, 2016
blog
blog
Pinpoint: How GPS Is Changing Technology, Culture, and Our Minds
By on Jul 05, 2016
blog
blog
How Not to Network a Nation: The Uneasy History of the Soviet Internet
By on Jun 15, 2016
blog
blog
Breakthroughs in Decision Science and Risk Analysis
By on May 03, 2016
blog
Hadoop Security: Protecting Your Big Data Platform
By on May 02, 2016
blog
Hacking for Dummies: Fifth Edition
By on Apr 26, 2016
blog
Bitcoin for Nonmathematicians: Exploring the Foundations of Crypto Payments
By on Apr 19, 2016
blog
Dark Territory: The Secret History of Cyber War
By on Apr 13, 2016
blog
blog
RSA Conference 2016: Security of Public Cloud Services—It Takes a Village
By on Apr 05, 2016
blog
blog
The Car Hacker's Handbook: A Guide for the Penetration Tester
By on Mar 26, 2016
blog
blog
blog
Achieving Digital Trust: The New Rules for Business at the Speed of Light
By on Feb 16, 2016
blog
Essential Cybersecurity Science: Build, Test, and Evaluate Secure Systems
By on Jan 19, 2016
blog
Encryption Made Simple for Lawyers
By on Jan 06, 2016
blog
The Security Reading Room: The Best Information Security Books of 2015
By on Dec 23, 2015
blog
Lights Out: A Cyberattack, A Nation Unprepared, Surviving the Aftermath
By on Dec 02, 2015
blog
Managing Online Risk: Apps, Mobile, and Social Media Security
By on Dec 01, 2015
blog
Security Operations Center: Building, Operating, and Maintaining your SOC
By on Nov 30, 2015
blog
blog
The Network Security Test Lab: A Step-by-Step Guide
By on Nov 04, 2015
blog
blog
Network Attacks and Exploitation: A Framework
By on Oct 02, 2015
blog
blog
Introduction to Social Media Investigation
By on Aug 28, 2015
blog
blog
Digital Identity Management
By on Aug 06, 2015
blog
How Not To Be Hacked: The Definitive Guide for Regular People
By on Jul 30, 2015
blog
Cloud Computing Design Patterns
By on Jul 13, 2015
blog
blog
blog
blog
blog
blog
CSA Guide to Cloud Computing: Implementing Cloud Privacy and Security
By on May 16, 2015
blog
Phishing Dark Waters: The Offensive and Defensive Sides of Malicious Emails
By on Apr 29, 2015
blog
Statistics Done Wrong: The Woefully Complete Guide
By on Apr 08, 2015
blog
blog
Measures and Metrics in Corporate Security
By on Mar 18, 2015
blog
blog
Social Media Security: Leveraging Social Networking While Mitigating Risk
By on Feb 03, 2015
blog
Designing and Building a Security Operations Center
By on Jan 28, 2015
blog
PRAGMATIC Security Metrics - Applying Metametrics to Information Security
By on Jan 27, 2015
blog
The Practical Guide to HIPAA Privacy and Security Compliance
By on Jan 25, 2015
blog
Enterprise Software Security: A Confluence of Disciplines
By on Jan 15, 2015
blog
Cyber Crime and Cyber Terrorism Investigator's Handbook
By on Jan 05, 2015
blog
The best information security book of 2014 and some other excellent ones
By on Dec 29, 2014
blog
Fire in the Valley: The Birth and Death of the Personal Computer
By on Dec 18, 2014
blog
blog
Bulletproof SSL and TLS
By on Nov 24, 2014
blog
blog
Measuring and Managing Information Risk: A FAIR Approach
By on Oct 27, 2014
blog
Official (ISC)2 Guide to the CCFP CBK
By on Oct 21, 2014
blog
Hate Crimes in Cyberspace
By on Oct 14, 2014
blog
Pre-review: Measuring and Managing Information Risk: A FAIR Approach
By on Oct 05, 2014
blog
Targeted Cyber Attacks: Multi-staged Attacks Driven by Exploits and Malware
By on Sep 22, 2014
blog
Architecting the Cloud: Design Decisions for Cloud Computing Service Models
By on Sep 08, 2014
blog
blog
Social Engineering in IT Security: Tools, Tactics, and Techniques
By on Aug 21, 2014
blog
Carry On: Sound Advice from Schneier on Security
By on Aug 11, 2014
blog
Introduction to Cyber-Warfare: A Multidisciplinary Approach
By on Aug 04, 2014
blog
Security Awareness: Applying Practical Security in Your World
By on Jul 22, 2014
blog
Data-Driven Security: Analysis, Visualization and Dashboards
By on Jul 07, 2014
blog
Cyber Crime, Security and Digital Intelligence
By on Jun 30, 2014
blog
blog
Hacking Point of Sale: Payment Application Secrets, Threats, and Solutions
By on May 26, 2014
blog
3 Excellent New Information Security Books - May 2014
By on May 21, 2014
blog
The CISSP Companion Handbook
By on May 15, 2014
blog
Two new basics books from Syngress
By on May 13, 2014
blog
Introduction to Information Security: A Strategic-Based Approach
By on May 07, 2014
blog
blog
Unmasking the Social Engineer: The Human Element of Security
By on Apr 13, 2014
blog
blog
Cyber Attack, CyberCrime, CyberWarfare - CyberComplacency
By on Mar 31, 2014
blog
Threat Modeling: Designing for Security
By on Mar 03, 2014
blog
The Best New Books from RSA Conference 2014
By on Feb 27, 2014
blog
blog
Brainstorming and Beyond: A User-Centered Design Method
By on Jan 26, 2014
blog
The Digital Crown: Winning at Content on the Web
By on Jan 13, 2014
blog
Job Reconnaissance: Using Hacking Skills to Win the Job Hunt Game
By on Jan 06, 2014
blog
Introduction to Computer Networks & Cybersecurity
By on Jan 02, 2014
blog
Digital Archaeology: The Art and Science of Digital Forensics
By on Dec 23, 2013
blog
blog
Engineering Safe and Secure Software Systems
By on Dec 09, 2013
blog
blog
Digital Outcasts: Moving Technology Forward without Leaving People Behind
By on Nov 25, 2013
blog
FISMA Compliance Handbook
By on Nov 17, 2013
blog
Testing Cloud Services: How to Test SaaS, PaaS & IaaS
By on Oct 29, 2013
blog
Secret History: The Story of Cryptology
By on Oct 16, 2013
blog
Java Coding Guidelines: 75 Recommendations for Reliable and Secure Programs
By on Oct 08, 2013
blog
Gupta & Brooks: Using Social Media for Global Security
By on Oct 01, 2013
blog
blog
SCADA and Me
By on Sep 12, 2013
blog
blog
blog
Practical Anonymity: Hiding in Plain Sight Online
By on Aug 29, 2013
blog
Hacking Exposed Mobile: Security Secrets & Solutions
By on Aug 26, 2013
blog
Secret History: The Story of Cryptology
By on Aug 15, 2013
blog
The Healthy Programmer: Get Fit, Feel Better, and Keep Coding
By on Aug 12, 2013
blog
blog
Hacking Exposed Mobile Security Secrets and Solutions
By on Aug 05, 2013
blog
The Healthy Programmer: Get Fit, Feel Better and Keep Coding
By on Aug 01, 2013
blog
Present Yourself: Using SlideShare to Grow Your Business
By on Jul 29, 2013
blog
Cloud Computing: Theory and Practice
By on Jul 22, 2013
blog
Assessing Vendors: A Hands-On Guide to Assessing Infosec and IT Vendors
By on Jul 10, 2013
blog
Cloud Computing: Concepts, Technology & Architecture
By on Jul 07, 2013
blog
blog
blog
blog
Assessing Vendors: A Hands-On Guide to Assessing Infosec & IT Vendors
By on May 30, 2013
blog
blog
Locked Down: Information Security for Lawyers
By on May 20, 2013
blog
The Chinese Information War
By on May 13, 2013
blog
The Plateau Effect: Getting from Stuck to Success
By on May 13, 2013
blog
Secure Coding in C and C++
By on May 07, 2013
blog
Cybersecurity: Public Sector Threats and Responses
By on May 02, 2013
blog
Applied Information Security: A Hands-on Approach
By on Apr 22, 2013
blog
The Death of the Internet - Markus Jakobsson
By on Apr 15, 2013
blog
blog
Introduction to Computer Networks and Cybersecurity
By on Mar 28, 2013
blog
Managing Risk and Information Security: Protect to Enable
By on Mar 20, 2013
blog
PRAGMATIC Security Metrics: Applying Metametrics to Information Security
By on Mar 14, 2013
blog
blog
The Hacker's Guide to OS X: Exploiting OS X from the Root Up
By on Mar 05, 2013
blog
The Phoenix Project
By on Feb 28, 2013
blog
Two new security certification review guides from Microsoft Press
By on Feb 21, 2013
blog
The Design of Rijndael: AES - The Advanced Encryption Standard
By on Feb 19, 2013
blog
Security Engineering: A Guide to Building Dependable Distributed Systems
By on Feb 15, 2013
blog
Using Social Media for Global Security
By on Feb 11, 2013
blog
Low Tech Hacking: Street Smarts for Security Professionals
By on Feb 07, 2013
blog
Computer Security Literacy: Staying Safe in a Digital World
By on Feb 04, 2013
blog
Hacking For Dummies – 4th edition
By on Jan 30, 2013
blog
A Gift of Fire: Social, Legal, and Ethical Issues for Computing Technology
By on Jan 21, 2013
blog
Official (ISC)2 Guide to the CISSP CBK – 3rd edition
By on Jan 16, 2013
blog
blog
Web Application Defender's Cookbook: Battling Hackers and Protecting Users
By on Jan 03, 2013
blog
Virtualization Security: Protecting Virtualized Environments
By on Dec 27, 2012
blog
blog
Engineering Safe and Secure Software Systems
By on Dec 20, 2012
blog
Bad Data Handbook: Cleaning Up The Data So You Can Get Back To Work
By on Dec 18, 2012
blog
blog
Gatekeeper: What's New in OS X Mountain Lion Security
By on Dec 10, 2012
blog
Two great lockpicking books from Deviant Ollam
By on Dec 05, 2012
blog
blog
Two new CISSP books from Shon Harris
By on Nov 20, 2012
blog
Reverse Deception: Organized Cyber Threat Counter-Exploitation
By on Nov 12, 2012
blog
blog
Ethics of Big Data: Balancing Risk and Innovation
By on Nov 01, 2012
blog
Information Security Management Handbook – 2012 edition
By on Oct 25, 2012
blog
blog
Two new lockpicking books from Deviant Ollam
By on Oct 18, 2012
blog
Everyday Cryptography: Fundamental Principles and Applications
By on Oct 15, 2012
blog
CISSP Study Guide, Second Edition
By on Oct 10, 2012
blog
blog
ISO27001 in a Windows Environment
By on Oct 03, 2012
blog
Two new SQL security books from Syngress
By on Sep 27, 2012
blog
Digital Forensics for Handheld Devices
By on Sep 24, 2012
blog
Preview - Everyday Cryptography: Fundamental Principles and Applications
By on Sep 19, 2012
blog
CISSP for Dummies
By on Sep 14, 2012
blog
blog
Preview - Digital Forensics for Handheld Devices
By on Aug 30, 2012
blog
blog
Illustrated Guide to Home Forensic Science Experiments: All Lab, No Lecture
By on Aug 22, 2012
blog
Best Practices for the Destruction of Digital Data
By on Aug 15, 2012
blog
Navigating Social Media Legal Risks: Safeguarding Your Business
By on Aug 14, 2012
blog
The Rise of the Virtual-Plagiarist
By on Aug 13, 2012
blog
Hacking Exposed 7: Network Security Secrets & Solutions
By on Aug 06, 2012
blog
blog
blog
Preview - Reverse Deception Organized Cyber Threat Counter-Exploitation
By on Jul 18, 2012
blog
The 7 Qualities of Highly Secure Software
By on Jul 16, 2012
blog
Preview - Navigating Social Media Legal Risks: Safeguarding Your Business
By on Jul 11, 2012
blog
Cyber Attacks Protecting National Infrastructure
By on Jul 09, 2012
blog
Network Forensics: Tracking Hackers through Cyberspace
By on Jun 28, 2012
blog
Web of Deceit: Misinformation and Manipulation in the Age of Social Media
By on Jun 27, 2012
blog
blog
Wireless Network Security A Beginner's Guide
By on Jun 18, 2012
blog
blog
Security and Privacy for Microsoft Office 2010 Users
By on May 24, 2012
blog
Elementary Information Security
By on May 18, 2012
blog
blog
Fitness for Geeks: Real Science, Great Nutrition and Good Health
By on Apr 30, 2012
blog
The Woman Who Wasn't There: The True Story of an Incredible Deception
By on Apr 23, 2012
blog
Preview - Cyber Security Policy Guidebook
By on Apr 20, 2012
blog
blog
Preview - Information Security Policies Made Easy Version 12
By on Apr 16, 2012
blog
Preview - Security Strategies in Web Applications and Social Networking
By on Apr 04, 2012
blog
Microsoft Manual of Style
By on Mar 21, 2012
blog
The Shpantzer Interview Technique
By on Mar 20, 2012
blog
In memory of Hal Tipton
By on Mar 18, 2012
blog
Preview - Cyber Attacks: Protecting National Infrastructure
By on Mar 11, 2012
blog
blog
Preview - Microsoft Manual of Style
By on Feb 27, 2012
blog
Liars and Outliers: Enabling the Trust that Society Needs to Thrive
By on Feb 22, 2012
blog
blog
Preventing Good People From Doing Bad Things: Implementing Least Privilege
By on Feb 12, 2012
blog
Preview - Low Tech Hacking: Street Smarts for Security Professionals
By on Feb 06, 2012
blog
Preview - Elementary Information Security
By on Feb 05, 2012
blog
To the Cloud: Cloud Powering an Enterprise
By on Jan 31, 2012
blog
The Tangled Web: A Guide to Securing Modern Web Applications
By on Jan 25, 2012
blog
blog
blog
Preview - The Tangled Web: A Guide to Securing Modern Web Applications
By on Jan 08, 2012
blog
Metasploit: The Penetration Tester's Guide
By on Jan 03, 2012
blog
blog
Preview - Privacy and Big Data
By on Dec 11, 2011
blog
Preview - Mindfire: Big Ideas for Curious Minds
By on Dec 04, 2011
blog
Goedel's Way: Exploits into an undecidable world
By on Dec 01, 2011
blog
The CERT Oracle Secure Coding Standard for Java
By on Nov 30, 2011
blog
blog
Digital Forensics for Legal Professionals
By on Nov 20, 2011
blog
Securing the Clicks Network Security in the Age of Social Media
By on Nov 04, 2011
blog
Preview - Auditing Cloud Computing: A Security and Privacy Guide
By on Nov 03, 2011
blog
blog
blog
blog
Preview - The CERT Oracle Secure Coding Standard for Java
By on Oct 11, 2011
blog
Preview - Two new pen test books from Syngress
By on Oct 06, 2011
blog
Preview - The Cloud Security Rules
By on Oct 05, 2011
blog
blog
blog
Two new information security books from Syngress
By on Sep 13, 2011
blog
Preview - Biometrics in Identity Management: Concepts to Applications
By on Sep 08, 2011
blog
Preview - Metasploit: The Penetration Tester's Guide
By on Sep 04, 2011
blog
Ghost in the Wires: My Adventures as the World's Most Wanted Hacker
By on Aug 26, 2011
blog
blog
blog
blog
blog
Securing the Cloud: Cloud Computer Security Techniques and Tactics
By on Jul 19, 2011
blog
Lessons from LIGATT
By on Jul 11, 2011
blog
Surveillance or Security?: The Risks Posed by New Wiretapping Technologies
By on Jul 08, 2011
blog
Preview - Cisco Firewalls
By on Jul 01, 2011
blog
3 new forensics books from Syngress
By on Jun 29, 2011
blog
Preview - Digital Evidence and Computer Crime
By on Jun 28, 2011
blog
blog
blog
blog
blog
Vulnerability Management
By on May 13, 2011
blog
Global Terrorism and New Media: The Post-Al Qaeda Generation
By on May 01, 2011
blog
Network Security Auditing
By on Apr 27, 2011
blog
Preview - Adaptive Security Management Architecture
By on Apr 08, 2011
blog
15 Minutes Including Q&A: A Plan to Save the World From Lousy Presentations
By on Apr 04, 2011
blog
Kevin Mitnick is coming out with a new book
By on Mar 29, 2011
blog
Social Engineering: The Art of Human Hacking
By on Mar 09, 2011
blog
Everything I need to know about PowerPoint, I learned from Adi Shamir
By on Mar 03, 2011
blog
Security Information and Event Management (SIEM) Implementation
By on Feb 24, 2011
blog
On the road, live from RSA 2011
By on Feb 22, 2011
blog
The top 5 security books at RSA 2011 from the Security Reading Room
By on Feb 18, 2011
blog
blog
Vein Pattern Recognition: A Privacy-Enhancing Biometric
By on Feb 03, 2011
blog
Computer Incident Response and Product Security
By on Jan 24, 2011
blog
Preview - Implementing ISO27001 in a Windows Environment
By on Jan 13, 2011
blog
Securing the Smart Grid: Next Generation Power Grid Security
By on Jan 05, 2011
blog
Preview - Computer Incident Response and Product Security
By on Dec 17, 2010
blog
Deceptive email - this time from SAP
By on Dec 07, 2010
blog
Preview - Securing the Smart Grid: Next Generation Power Grid Security
By on Dec 07, 2010
blog
Quick look - Understanding Amazon book reviews
By on Dec 06, 2010
blog
Cryptography Engineering: Design Principles and Practical Applications
By on Dec 01, 2010
blog
VeriSign marketing - they listen
By on Nov 18, 2010
blog
Security Strategy: From Requirements to Reality
By on Nov 15, 2010
blog
CyberForensics: Understanding Information Security Investigations
By on Oct 27, 2010
blog
What’s with VeriSign and their deceptive marketing tactics?
By on Oct 26, 2010
blog
Preview - CyberForensics: Understanding Information Security Investigations
By on Oct 20, 2010
blog
blog
Is writing certification guides a replacement for psychotherapy?
By on Oct 06, 2010
blog
blog
Preview - Hacking For Dummies - 3rd edition
By on Sep 08, 2010
blog
The Executive MBA in Information Security
By on Sep 01, 2010
blog
Is 2010 the year of the plagiarized security book?
By on Aug 19, 2010
blog
blog
Best Damn Cybercrime and Digital Forensics Book Period
By on Jul 01, 2010
blog
Outsourcing SAP Operations
By on Jun 21, 2010
blog
The Psychology of Safety
By on Jun 18, 2010
blog
Fair use, plagiarism and the World’s No. 1 Hacker book
By on Jun 14, 2010
blog
How To Become The Worlds No. 1 Hacker
By on Jun 10, 2010
blog
Webinar June 29 - Effective Data Destruction Practices
By on Jun 09, 2010
blog
Webinar June 8 - Effective Data Destruction Practices
By on Jun 03, 2010
blog
Books from SAP Press
By on May 25, 2010
blog
Preview - Vein Pattern Recognition: A Privacy-Enhancing Biometric
By on May 22, 2010
blog
The Illusion of Due Diligence
By on Apr 28, 2010
blog
blog
How to build a safety culture in three steps
By on Apr 14, 2010
blog
blog
On the Road at RSA 2010 – interviews of thought leaders from the conference
By on Mar 19, 2010
blog
My slides from the PechaKucha (PK) Happy Hour
By on Mar 05, 2010
blog
Tales from the Info Security Reading Room
By on Mar 04, 2010
blog
blog
The Myth of Homeland Security
By on Feb 25, 2010
blog
Building Secure Software: How to Avoid Security Problems the Right Way
By on Feb 25, 2010
blog
On deceptive email I get from VeriSign
By on Feb 19, 2010
blog
blog
Security Warrior
By on Feb 17, 2010
blog
Forensic Discovery
By on Feb 16, 2010
blog
Managing an Information Security and Privacy Awareness and Training Program
By on Feb 12, 2010
blog
Cryptography for Dummies
By on Feb 11, 2010
blog
Hacking For Dummies
By on Feb 10, 2010
blog
Outsourcing Information Security
By on Feb 09, 2010
blog
blog
blog
blog
The German Enigma Cipher Machine: Beginnings, Success, and Ultimate Failure
By on Feb 01, 2010
blog
blog
Brute Force: Cracking the Data Encryption Standard
By on Jan 28, 2010
blog
Expert Network Time Protocol: An Experience in Time with NTP
By on Jan 28, 2010
blog
blog
The Social Media Marketing Book
By on Jan 22, 2010
blog
blog
Cryptography in the Database: The Last Line of Defense
By on Jan 22, 2010
blog
Digital Identity
By on Jan 22, 2010
blog
Securing IM and P2P Applications for the Enterprise
By on Jan 21, 2010
blog
Web Mapping Illustrated: Using Open Source GIS Toolkits
By on Jan 21, 2010
blog
Free Lunch 2010: Why Public Algorithms Beat the Alternative
By on Jan 21, 2010
blog
The Software Vulnerability Guide
By on Jan 19, 2010
blog
19 Deadly Sins of Software Security: Programming Flaws and How to Fix Them
By on Jan 19, 2010
blog
Computer Network Time Synchronization: The Network Time Protocol
By on Jan 19, 2010
blog
e-Book: PCI Compliance for Dummies
By on Jan 18, 2010
blog
Handbook of Applied Cryptography - available free online
By on Jan 18, 2010
blog
RSA Crypto FAQ
By on Jan 18, 2010
blog
How to Cheat at Managing Information Security
By on Jan 14, 2010
blog
PGP & GPG: Email for the Practical Paranoid
By on Jan 14, 2010
blog
Protect Your Windows Network: From Perimeter to Data
By on Jan 14, 2010
blog
The Privacy Management Toolkit
By on Jan 13, 2010
blog
blog
Information Security Policies Made Easy
By on Jan 13, 2010
blog
Why Software Sucks...and What You Can Do About It
By on Jan 12, 2010
blog
blog
In Search of Stupidity: Over Twenty Years of High Tech Marketing Disasters
By on Jan 12, 2010
blog
blog
blog
Preview - The Social Media Marketing Book
By on Jan 08, 2010
blog
blog
Enterprise Security for the Executive: Setting the Tone from the Top
By on Jan 06, 2010
blog
Security Power Tools
By on Jan 05, 2010
blog
Terminal Chaos: Why U.S. Air Travel Is Broken and How to Fix It
By on Jan 05, 2010
blog
blog
Security Metrics: Replacing Fear, Uncertainty, and Doubt
By on Jan 04, 2010
blog
Software Security: Building Security In
By on Jan 04, 2010
blog
Stealing Your Life: The Ultimate Identity Theft Prevention Plan
By on Jan 04, 2010
blog
blog
Forensic Accounting and Fraud Investigation for Non-Experts
By on Dec 31, 2009
blog
Plane Simple Truth: Clearing the air on aviation's environmental impact
By on Dec 31, 2009
blog
Touching the World of Angels; How My Daughter's Short Life Changed Mine
By on Dec 30, 2009
blog
Building an Effective Information Security Policy Architecture
By on Dec 30, 2009
blog
Counterdeception Principles and Applications for National Security
By on Dec 30, 2009
blog
The New School of Information Security
By on Dec 28, 2009
blog
Geekonomics: The Real Cost of Insecure Software
By on Dec 28, 2009
blog
blog
blog
Biometrics For Dummies
By on Dec 23, 2009
blog
Exploiting Online Games: Cheating Massively Distributed Systems
By on Dec 23, 2009
blog
Transportation and Cargo Security: Threats and Solutions
By on Dec 22, 2009
blog
Trick or Treatment: The Undeniable Facts about Alternative Medicine
By on Dec 22, 2009
blog
CISO Leadership: Essential Principles for Success
By on Dec 22, 2009
blog
blog
Schneier on Security - the best of rock star of information security
By on Dec 21, 2009
blog
Computer Security: 20 Things Every Employee Should Know
By on Dec 21, 2009
blog
The nmap book: valuable book about an invaluable security tool
By on Dec 18, 2009
blog
Googling Security: How Much Does Google Know About You?
By on Dec 18, 2009
blog
Big brother, much ado about nothing
By on Dec 17, 2009
blog
Dan Geer gets it
By on Dec 17, 2009
blog
The Pragmatic CSO - 12 Steps to Being a Security Master
By on Dec 16, 2009
blog
blog
Beautiful Security: Leading Security Experts Explain How They Think
By on Dec 16, 2009
blog
blog
The Geek Atlas: 128 Places Where Science and Technology Come Alive
By on Dec 15, 2009
blog
Tetraktys is not the world's first cryptographic thriller
By on Dec 14, 2009
blog
blog
What do alcoholic pilots and hackers have in common?
By on Dec 14, 2009
blog
The best information security book I ever read is….
By on Dec 12, 2009
blog
Welcome to the Security Reading Room blog
By on Dec 12, 2009
blog
Book review of Confessions of a Public Speaker
By on Dec 12, 2009
blog
blog
Ben's Book of the Month: Review of "Computer Security and the Internet"
By on Apr 07, 2022
blog
Ben's Book of the Month: Review of "The Security Hippie"
By on Mar 16, 2022
blog
blog
blog
Ben's Book of the Month: Review of "Ransomware Protection Playbook"
By on Nov 30, 2021
Webcast
blog
blog
blog
blog
Ben's Book of the Month: Review of "Do No Harm"
By on Jul 30, 2021
blog
Ben’s Books of the Month: A Hat Trick of Information Security Titles
By on Jun 30, 2021
blog
Ben’s Book of the Month: May 2021 Book Review
By on May 31, 2021
blog
Ben's Book of the Month: "Hacking Multifactor Authentication"
By on Feb 28, 2021
blog
blog
Book review: "The Cyber Attack Survival Manual"
By on Jan 26, 2021
blog
blog
blog
blog
blog
blog
blog
blog
Book review: Stiennon On Security: Collected Essays Volume 1
By on Jul 17, 2020
blog
Ben’s Book of the Month: Review of “Data Breaches: Crisis and Opportunity”
By on Jun 30, 2020
blog
Book Review: PCI DSS: An Integrated Data Security Standard Guide
By on Jun 23, 2020
blog
Ben's Book of The Month: Review of "The Digital Big Bang"
By on May 29, 2020
blog
blog
blog
blog
blog
Bens Book of the Month Review of How to Manage Cybersecurity Risk
By on Feb 28, 2020
blog
blog
Book Review: "SAP Cybersecurity for CISO"
By on Jan 15, 2020
blog
Ben's Book of the Month: Review of "Cryptography Apocalypse"
By on Dec 30, 2019
blog
Ben's Book of the Month: Review of "Permanent Record"
By on Nov 26, 2019
blog
blog
blog
blog
blog
blog
Book review: The Official (ISC)² Guide to the CISSP CBK Reference
By on Jun 18, 2019
blog
blog
blog
Ben's Book Review: "The Linux Command Line: A Complete Introduction"
By on Apr 12, 2019
blog
blog
blog
blog
Millions, Billions, Zillions Defending Yourself in a World of Too Many
By on Dec 17, 2018
blog
blog
blog
blog
blog
blog
blog
blog
blog
presentation
presentation
presentation
Ransomware and Destructive Attacks
On Apr 16, 2018
blog
blog
blog
blog
blog
Book Review: The Woman Who Smashed Codes
By on Jan 19, 2018
blog
blog
blog
blog
blog
blog
blog
Ben's Book of the Month: Review of "The CISO Journey"
By on Aug 31, 2017
blog
blog
blog
The Hardware Hacker: Adventures in Making and Breaking Hardware
By on Jul 17, 2017
blog
Ben's Book of the Month: Review of "Information Security Policies Made Easy"
By on Jun 30, 2017
blog
blog
NTP Security: A Quick-Start Guide
By on May 02, 2017
blog
blog
blog
blog
Ben's Book of the Month: Review of "Hospital and Healthcare Security"
By on Feb 28, 2017
blog
Audio Content Security: Attack Analysis on Audio Watermarking
By on Feb 21, 2017
presentation
Countering Cyberespionage
On Feb 14, 2017
blog
The Security Reading Room: The Best Information Security Books of 2016
By on Feb 05, 2017
blog
Ransomware: Defending Against Digital Extortion
By on Jan 11, 2017
blog
blog
blog
Secure Data Deletion
By on Nov 30, 2016
blog
DNS Security: Defending the Domain Name System
By on Nov 22, 2016
blog
Hack-Proof Your Life Now! The New Cybersecurity Rules
By on Nov 02, 2016
blog
Cybersecurity and Applied Mathematics
By on Oct 26, 2016
blog
blog
Obfuscation: A User's Guide for Privacy and Protest
By on Oct 06, 2016
blog
blog
Bitcoin and Cryptocurrency Technologies: A Comprehensive Introduction
By on Sep 06, 2016
blog
Infrastructure as Code: Managing Servers in the Cloud
By on Aug 19, 2016
blog
Insider Threat: Prevention, Detection, Mitigation, and Deterrence
By on Aug 01, 2016
blog
blog
Pinpoint: How GPS Is Changing Technology, Culture, and Our Minds
By on Jul 05, 2016
blog
blog
How Not to Network a Nation: The Uneasy History of the Soviet Internet
By on Jun 15, 2016
blog
blog
Breakthroughs in Decision Science and Risk Analysis
By on May 03, 2016
blog
Hadoop Security: Protecting Your Big Data Platform
By on May 02, 2016
blog
Hacking for Dummies: Fifth Edition
By on Apr 26, 2016
blog
Bitcoin for Nonmathematicians: Exploring the Foundations of Crypto Payments
By on Apr 19, 2016
blog
Dark Territory: The Secret History of Cyber War
By on Apr 13, 2016
blog
blog
RSA Conference 2016: Security of Public Cloud Services—It Takes a Village
By on Apr 05, 2016
blog
blog
The Car Hacker's Handbook: A Guide for the Penetration Tester
By on Mar 26, 2016
blog
blog
blog
Achieving Digital Trust: The New Rules for Business at the Speed of Light
By on Feb 16, 2016
blog
Essential Cybersecurity Science: Build, Test, and Evaluate Secure Systems
By on Jan 19, 2016
blog
Encryption Made Simple for Lawyers
By on Jan 06, 2016
blog
The Security Reading Room: The Best Information Security Books of 2015
By on Dec 23, 2015
blog
Lights Out: A Cyberattack, A Nation Unprepared, Surviving the Aftermath
By on Dec 02, 2015
blog
Managing Online Risk: Apps, Mobile, and Social Media Security
By on Dec 01, 2015
blog
Security Operations Center: Building, Operating, and Maintaining your SOC
By on Nov 30, 2015
blog
blog
The Network Security Test Lab: A Step-by-Step Guide
By on Nov 04, 2015
blog
blog
Network Attacks and Exploitation: A Framework
By on Oct 02, 2015
blog
blog
Introduction to Social Media Investigation
By on Aug 28, 2015
blog
blog
Digital Identity Management
By on Aug 06, 2015
blog
How Not To Be Hacked: The Definitive Guide for Regular People
By on Jul 30, 2015
blog
Cloud Computing Design Patterns
By on Jul 13, 2015
blog
blog
blog
blog
blog
blog
CSA Guide to Cloud Computing: Implementing Cloud Privacy and Security
By on May 16, 2015
blog
Phishing Dark Waters: The Offensive and Defensive Sides of Malicious Emails
By on Apr 29, 2015
blog
Statistics Done Wrong: The Woefully Complete Guide
By on Apr 08, 2015
blog
blog
Measures and Metrics in Corporate Security
By on Mar 18, 2015
blog
blog
Social Media Security: Leveraging Social Networking While Mitigating Risk
By on Feb 03, 2015
blog
Designing and Building a Security Operations Center
By on Jan 28, 2015
blog
PRAGMATIC Security Metrics - Applying Metametrics to Information Security
By on Jan 27, 2015
blog
The Practical Guide to HIPAA Privacy and Security Compliance
By on Jan 25, 2015
blog
Enterprise Software Security: A Confluence of Disciplines
By on Jan 15, 2015
blog
Cyber Crime and Cyber Terrorism Investigator's Handbook
By on Jan 05, 2015
blog
The best information security book of 2014 and some other excellent ones
By on Dec 29, 2014
blog
Fire in the Valley: The Birth and Death of the Personal Computer
By on Dec 18, 2014
blog
blog
Bulletproof SSL and TLS
By on Nov 24, 2014
blog
blog
Measuring and Managing Information Risk: A FAIR Approach
By on Oct 27, 2014
blog
Official (ISC)2 Guide to the CCFP CBK
By on Oct 21, 2014
blog
Hate Crimes in Cyberspace
By on Oct 14, 2014
blog
Pre-review: Measuring and Managing Information Risk: A FAIR Approach
By on Oct 05, 2014
blog
Targeted Cyber Attacks: Multi-staged Attacks Driven by Exploits and Malware
By on Sep 22, 2014
blog
Architecting the Cloud: Design Decisions for Cloud Computing Service Models
By on Sep 08, 2014
blog
blog
Social Engineering in IT Security: Tools, Tactics, and Techniques
By on Aug 21, 2014
blog
Carry On: Sound Advice from Schneier on Security
By on Aug 11, 2014
blog
Introduction to Cyber-Warfare: A Multidisciplinary Approach
By on Aug 04, 2014
blog
Security Awareness: Applying Practical Security in Your World
By on Jul 22, 2014
blog
Data-Driven Security: Analysis, Visualization and Dashboards
By on Jul 07, 2014
blog
Cyber Crime, Security and Digital Intelligence
By on Jun 30, 2014
blog
blog
Hacking Point of Sale: Payment Application Secrets, Threats, and Solutions
By on May 26, 2014
blog
3 Excellent New Information Security Books - May 2014
By on May 21, 2014
blog
The CISSP Companion Handbook
By on May 15, 2014
blog
Two new basics books from Syngress
By on May 13, 2014
blog
Introduction to Information Security: A Strategic-Based Approach
By on May 07, 2014
blog
blog
Unmasking the Social Engineer: The Human Element of Security
By on Apr 13, 2014
blog
blog
Cyber Attack, CyberCrime, CyberWarfare - CyberComplacency
By on Mar 31, 2014
blog
Threat Modeling: Designing for Security
By on Mar 03, 2014
blog
The Best New Books from RSA Conference 2014
By on Feb 27, 2014
blog
blog
Brainstorming and Beyond: A User-Centered Design Method
By on Jan 26, 2014
blog
The Digital Crown: Winning at Content on the Web
By on Jan 13, 2014
blog
Job Reconnaissance: Using Hacking Skills to Win the Job Hunt Game
By on Jan 06, 2014
blog
Introduction to Computer Networks & Cybersecurity
By on Jan 02, 2014
blog
Digital Archaeology: The Art and Science of Digital Forensics
By on Dec 23, 2013
blog
blog
Engineering Safe and Secure Software Systems
By on Dec 09, 2013
blog
blog
Digital Outcasts: Moving Technology Forward without Leaving People Behind
By on Nov 25, 2013
blog
FISMA Compliance Handbook
By on Nov 17, 2013
blog
Testing Cloud Services: How to Test SaaS, PaaS & IaaS
By on Oct 29, 2013
blog
Secret History: The Story of Cryptology
By on Oct 16, 2013
blog
Java Coding Guidelines: 75 Recommendations for Reliable and Secure Programs
By on Oct 08, 2013
blog
Gupta & Brooks: Using Social Media for Global Security
By on Oct 01, 2013
blog
blog
SCADA and Me
By on Sep 12, 2013
blog
blog
blog
Practical Anonymity: Hiding in Plain Sight Online
By on Aug 29, 2013
blog
Hacking Exposed Mobile: Security Secrets & Solutions
By on Aug 26, 2013
blog
Secret History: The Story of Cryptology
By on Aug 15, 2013
blog
The Healthy Programmer: Get Fit, Feel Better, and Keep Coding
By on Aug 12, 2013
blog
blog
Hacking Exposed Mobile Security Secrets and Solutions
By on Aug 05, 2013
blog
The Healthy Programmer: Get Fit, Feel Better and Keep Coding
By on Aug 01, 2013
blog
Present Yourself: Using SlideShare to Grow Your Business
By on Jul 29, 2013
blog
Cloud Computing: Theory and Practice
By on Jul 22, 2013
blog
Assessing Vendors: A Hands-On Guide to Assessing Infosec and IT Vendors
By on Jul 10, 2013
blog
Cloud Computing: Concepts, Technology & Architecture
By on Jul 07, 2013
blog
blog
blog
blog
Assessing Vendors: A Hands-On Guide to Assessing Infosec & IT Vendors
By on May 30, 2013
blog
blog
Locked Down: Information Security for Lawyers
By on May 20, 2013
blog
The Chinese Information War
By on May 13, 2013
blog
The Plateau Effect: Getting from Stuck to Success
By on May 13, 2013
blog
Secure Coding in C and C++
By on May 07, 2013
blog
Cybersecurity: Public Sector Threats and Responses
By on May 02, 2013
blog
Applied Information Security: A Hands-on Approach
By on Apr 22, 2013
blog
The Death of the Internet - Markus Jakobsson
By on Apr 15, 2013
blog
blog
Introduction to Computer Networks and Cybersecurity
By on Mar 28, 2013
blog
Managing Risk and Information Security: Protect to Enable
By on Mar 20, 2013
blog
PRAGMATIC Security Metrics: Applying Metametrics to Information Security
By on Mar 14, 2013
blog
blog
The Hacker's Guide to OS X: Exploiting OS X from the Root Up
By on Mar 05, 2013
blog
The Phoenix Project
By on Feb 28, 2013
blog
Two new security certification review guides from Microsoft Press
By on Feb 21, 2013
blog
The Design of Rijndael: AES - The Advanced Encryption Standard
By on Feb 19, 2013
blog
Security Engineering: A Guide to Building Dependable Distributed Systems
By on Feb 15, 2013
blog
Using Social Media for Global Security
By on Feb 11, 2013
blog
Low Tech Hacking: Street Smarts for Security Professionals
By on Feb 07, 2013
blog
Computer Security Literacy: Staying Safe in a Digital World
By on Feb 04, 2013
blog
Hacking For Dummies – 4th edition
By on Jan 30, 2013
blog
A Gift of Fire: Social, Legal, and Ethical Issues for Computing Technology
By on Jan 21, 2013
blog
Official (ISC)2 Guide to the CISSP CBK – 3rd edition
By on Jan 16, 2013
blog
blog
Web Application Defender's Cookbook: Battling Hackers and Protecting Users
By on Jan 03, 2013
blog
Virtualization Security: Protecting Virtualized Environments
By on Dec 27, 2012
blog
blog
Engineering Safe and Secure Software Systems
By on Dec 20, 2012
blog
Bad Data Handbook: Cleaning Up The Data So You Can Get Back To Work
By on Dec 18, 2012
blog
blog
Gatekeeper: What's New in OS X Mountain Lion Security
By on Dec 10, 2012
blog
Two great lockpicking books from Deviant Ollam
By on Dec 05, 2012
blog
blog
Two new CISSP books from Shon Harris
By on Nov 20, 2012
blog
Reverse Deception: Organized Cyber Threat Counter-Exploitation
By on Nov 12, 2012
blog
blog
Ethics of Big Data: Balancing Risk and Innovation
By on Nov 01, 2012
blog
Information Security Management Handbook – 2012 edition
By on Oct 25, 2012
blog
blog
Two new lockpicking books from Deviant Ollam
By on Oct 18, 2012
blog
Everyday Cryptography: Fundamental Principles and Applications
By on Oct 15, 2012
blog
CISSP Study Guide, Second Edition
By on Oct 10, 2012
blog
blog
ISO27001 in a Windows Environment
By on Oct 03, 2012
blog
Two new SQL security books from Syngress
By on Sep 27, 2012
blog
Digital Forensics for Handheld Devices
By on Sep 24, 2012
blog
Preview - Everyday Cryptography: Fundamental Principles and Applications
By on Sep 19, 2012
blog
CISSP for Dummies
By on Sep 14, 2012
blog
blog
Preview - Digital Forensics for Handheld Devices
By on Aug 30, 2012
blog
blog
Illustrated Guide to Home Forensic Science Experiments: All Lab, No Lecture
By on Aug 22, 2012
blog
Best Practices for the Destruction of Digital Data
By on Aug 15, 2012
blog
Navigating Social Media Legal Risks: Safeguarding Your Business
By on Aug 14, 2012
blog
The Rise of the Virtual-Plagiarist
By on Aug 13, 2012
blog
Hacking Exposed 7: Network Security Secrets & Solutions
By on Aug 06, 2012
blog
blog
blog
Preview - Reverse Deception Organized Cyber Threat Counter-Exploitation
By on Jul 18, 2012
blog
The 7 Qualities of Highly Secure Software
By on Jul 16, 2012
blog
Preview - Navigating Social Media Legal Risks: Safeguarding Your Business
By on Jul 11, 2012
blog
Cyber Attacks Protecting National Infrastructure
By on Jul 09, 2012
blog
Network Forensics: Tracking Hackers through Cyberspace
By on Jun 28, 2012
blog
Web of Deceit: Misinformation and Manipulation in the Age of Social Media
By on Jun 27, 2012
blog
blog
Wireless Network Security A Beginner's Guide
By on Jun 18, 2012
blog
blog
Security and Privacy for Microsoft Office 2010 Users
By on May 24, 2012
blog
Elementary Information Security
By on May 18, 2012
blog
blog
Fitness for Geeks: Real Science, Great Nutrition and Good Health
By on Apr 30, 2012
blog
The Woman Who Wasn't There: The True Story of an Incredible Deception
By on Apr 23, 2012
blog
Preview - Cyber Security Policy Guidebook
By on Apr 20, 2012
blog
blog
Preview - Information Security Policies Made Easy Version 12
By on Apr 16, 2012
blog
Preview - Security Strategies in Web Applications and Social Networking
By on Apr 04, 2012
blog
Microsoft Manual of Style
By on Mar 21, 2012
blog
The Shpantzer Interview Technique
By on Mar 20, 2012
blog
In memory of Hal Tipton
By on Mar 18, 2012
blog
Preview - Cyber Attacks: Protecting National Infrastructure
By on Mar 11, 2012
blog
blog
Preview - Microsoft Manual of Style
By on Feb 27, 2012
blog
Liars and Outliers: Enabling the Trust that Society Needs to Thrive
By on Feb 22, 2012
blog
blog
Preventing Good People From Doing Bad Things: Implementing Least Privilege
By on Feb 12, 2012
blog
Preview - Low Tech Hacking: Street Smarts for Security Professionals
By on Feb 06, 2012
blog
Preview - Elementary Information Security
By on Feb 05, 2012
blog
To the Cloud: Cloud Powering an Enterprise
By on Jan 31, 2012
blog
The Tangled Web: A Guide to Securing Modern Web Applications
By on Jan 25, 2012
blog
blog
blog
Preview - The Tangled Web: A Guide to Securing Modern Web Applications
By on Jan 08, 2012
blog
Metasploit: The Penetration Tester's Guide
By on Jan 03, 2012
blog
blog
Preview - Privacy and Big Data
By on Dec 11, 2011
blog
Preview - Mindfire: Big Ideas for Curious Minds
By on Dec 04, 2011
blog
Goedel's Way: Exploits into an undecidable world
By on Dec 01, 2011
blog
The CERT Oracle Secure Coding Standard for Java
By on Nov 30, 2011
blog
blog
Digital Forensics for Legal Professionals
By on Nov 20, 2011
blog
Securing the Clicks Network Security in the Age of Social Media
By on Nov 04, 2011
blog
Preview - Auditing Cloud Computing: A Security and Privacy Guide
By on Nov 03, 2011
blog
blog
blog
blog
Preview - The CERT Oracle Secure Coding Standard for Java
By on Oct 11, 2011
blog
Preview - Two new pen test books from Syngress
By on Oct 06, 2011
blog
Preview - The Cloud Security Rules
By on Oct 05, 2011
blog
blog
blog
Two new information security books from Syngress
By on Sep 13, 2011
blog
Preview - Biometrics in Identity Management: Concepts to Applications
By on Sep 08, 2011
blog
Preview - Metasploit: The Penetration Tester's Guide
By on Sep 04, 2011
blog
Ghost in the Wires: My Adventures as the World's Most Wanted Hacker
By on Aug 26, 2011
blog
blog
blog
blog
blog
Securing the Cloud: Cloud Computer Security Techniques and Tactics
By on Jul 19, 2011
blog
Lessons from LIGATT
By on Jul 11, 2011
blog
Surveillance or Security?: The Risks Posed by New Wiretapping Technologies
By on Jul 08, 2011
blog
Preview - Cisco Firewalls
By on Jul 01, 2011
blog
3 new forensics books from Syngress
By on Jun 29, 2011
blog
Preview - Digital Evidence and Computer Crime
By on Jun 28, 2011
blog
blog
blog
blog
blog
Vulnerability Management
By on May 13, 2011
blog
Global Terrorism and New Media: The Post-Al Qaeda Generation
By on May 01, 2011
blog
Network Security Auditing
By on Apr 27, 2011
blog
Preview - Adaptive Security Management Architecture
By on Apr 08, 2011
blog
15 Minutes Including Q&A: A Plan to Save the World From Lousy Presentations
By on Apr 04, 2011
blog
Kevin Mitnick is coming out with a new book
By on Mar 29, 2011
blog
Social Engineering: The Art of Human Hacking
By on Mar 09, 2011
blog
Everything I need to know about PowerPoint, I learned from Adi Shamir
By on Mar 03, 2011
blog
Security Information and Event Management (SIEM) Implementation
By on Feb 24, 2011
blog
On the road, live from RSA 2011
By on Feb 22, 2011
blog
The top 5 security books at RSA 2011 from the Security Reading Room
By on Feb 18, 2011
blog
blog
Vein Pattern Recognition: A Privacy-Enhancing Biometric
By on Feb 03, 2011
blog
Computer Incident Response and Product Security
By on Jan 24, 2011
blog
Preview - Implementing ISO27001 in a Windows Environment
By on Jan 13, 2011
blog
Securing the Smart Grid: Next Generation Power Grid Security
By on Jan 05, 2011
blog
Preview - Computer Incident Response and Product Security
By on Dec 17, 2010
blog
Deceptive email - this time from SAP
By on Dec 07, 2010
blog
Preview - Securing the Smart Grid: Next Generation Power Grid Security
By on Dec 07, 2010
blog
Quick look - Understanding Amazon book reviews
By on Dec 06, 2010
blog
Cryptography Engineering: Design Principles and Practical Applications
By on Dec 01, 2010
blog
VeriSign marketing - they listen
By on Nov 18, 2010
blog
Security Strategy: From Requirements to Reality
By on Nov 15, 2010
blog
CyberForensics: Understanding Information Security Investigations
By on Oct 27, 2010
blog
What’s with VeriSign and their deceptive marketing tactics?
By on Oct 26, 2010
blog
Preview - CyberForensics: Understanding Information Security Investigations
By on Oct 20, 2010
blog
blog
Is writing certification guides a replacement for psychotherapy?
By on Oct 06, 2010
blog
blog
Preview - Hacking For Dummies - 3rd edition
By on Sep 08, 2010
blog
The Executive MBA in Information Security
By on Sep 01, 2010
blog
Is 2010 the year of the plagiarized security book?
By on Aug 19, 2010
blog
blog
Best Damn Cybercrime and Digital Forensics Book Period
By on Jul 01, 2010
blog
Outsourcing SAP Operations
By on Jun 21, 2010
blog
The Psychology of Safety
By on Jun 18, 2010
blog
Fair use, plagiarism and the World’s No. 1 Hacker book
By on Jun 14, 2010
blog
How To Become The Worlds No. 1 Hacker
By on Jun 10, 2010
blog
Webinar June 29 - Effective Data Destruction Practices
By on Jun 09, 2010
blog
Webinar June 8 - Effective Data Destruction Practices
By on Jun 03, 2010
blog
Books from SAP Press
By on May 25, 2010
blog
Preview - Vein Pattern Recognition: A Privacy-Enhancing Biometric
By on May 22, 2010
blog
The Illusion of Due Diligence
By on Apr 28, 2010
blog
blog
How to build a safety culture in three steps
By on Apr 14, 2010
blog
blog
On the Road at RSA 2010 – interviews of thought leaders from the conference
By on Mar 19, 2010
blog
My slides from the PechaKucha (PK) Happy Hour
By on Mar 05, 2010
blog
Tales from the Info Security Reading Room
By on Mar 04, 2010
blog
blog
The Myth of Homeland Security
By on Feb 25, 2010
blog
Building Secure Software: How to Avoid Security Problems the Right Way
By on Feb 25, 2010
blog
On deceptive email I get from VeriSign
By on Feb 19, 2010
blog
blog
Security Warrior
By on Feb 17, 2010
blog
Forensic Discovery
By on Feb 16, 2010
blog
Managing an Information Security and Privacy Awareness and Training Program
By on Feb 12, 2010
blog
Cryptography for Dummies
By on Feb 11, 2010
blog
Hacking For Dummies
By on Feb 10, 2010
blog
Outsourcing Information Security
By on Feb 09, 2010
blog
blog
blog
blog
The German Enigma Cipher Machine: Beginnings, Success, and Ultimate Failure
By on Feb 01, 2010
blog
blog
Brute Force: Cracking the Data Encryption Standard
By on Jan 28, 2010
blog
Expert Network Time Protocol: An Experience in Time with NTP
By on Jan 28, 2010
blog
blog
The Social Media Marketing Book
By on Jan 22, 2010
blog
blog
Cryptography in the Database: The Last Line of Defense
By on Jan 22, 2010
blog
Digital Identity
By on Jan 22, 2010
blog
Securing IM and P2P Applications for the Enterprise
By on Jan 21, 2010
blog
Web Mapping Illustrated: Using Open Source GIS Toolkits
By on Jan 21, 2010
blog
Free Lunch 2010: Why Public Algorithms Beat the Alternative
By on Jan 21, 2010
blog
The Software Vulnerability Guide
By on Jan 19, 2010
blog
19 Deadly Sins of Software Security: Programming Flaws and How to Fix Them
By on Jan 19, 2010
blog
Computer Network Time Synchronization: The Network Time Protocol
By on Jan 19, 2010
blog
e-Book: PCI Compliance for Dummies
By on Jan 18, 2010
blog
Handbook of Applied Cryptography - available free online
By on Jan 18, 2010
blog
RSA Crypto FAQ
By on Jan 18, 2010
blog
How to Cheat at Managing Information Security
By on Jan 14, 2010
blog
PGP & GPG: Email for the Practical Paranoid
By on Jan 14, 2010
blog
Protect Your Windows Network: From Perimeter to Data
By on Jan 14, 2010
blog
The Privacy Management Toolkit
By on Jan 13, 2010
blog
blog
Information Security Policies Made Easy
By on Jan 13, 2010
blog
Why Software Sucks...and What You Can Do About It
By on Jan 12, 2010
blog
blog
In Search of Stupidity: Over Twenty Years of High Tech Marketing Disasters
By on Jan 12, 2010
blog
blog
blog
Preview - The Social Media Marketing Book
By on Jan 08, 2010
blog
blog
Enterprise Security for the Executive: Setting the Tone from the Top
By on Jan 06, 2010
blog
Security Power Tools
By on Jan 05, 2010
blog
Terminal Chaos: Why U.S. Air Travel Is Broken and How to Fix It
By on Jan 05, 2010
blog
blog
Security Metrics: Replacing Fear, Uncertainty, and Doubt
By on Jan 04, 2010
blog
Software Security: Building Security In
By on Jan 04, 2010
blog
Stealing Your Life: The Ultimate Identity Theft Prevention Plan
By on Jan 04, 2010
blog
blog
Forensic Accounting and Fraud Investigation for Non-Experts
By on Dec 31, 2009
blog
Plane Simple Truth: Clearing the air on aviation's environmental impact
By on Dec 31, 2009
blog
Touching the World of Angels; How My Daughter's Short Life Changed Mine
By on Dec 30, 2009
blog
Building an Effective Information Security Policy Architecture
By on Dec 30, 2009
blog
Counterdeception Principles and Applications for National Security
By on Dec 30, 2009
blog
The New School of Information Security
By on Dec 28, 2009
blog
Geekonomics: The Real Cost of Insecure Software
By on Dec 28, 2009
blog
blog
blog
Biometrics For Dummies
By on Dec 23, 2009
blog
Exploiting Online Games: Cheating Massively Distributed Systems
By on Dec 23, 2009
blog
Transportation and Cargo Security: Threats and Solutions
By on Dec 22, 2009
blog
Trick or Treatment: The Undeniable Facts about Alternative Medicine
By on Dec 22, 2009
blog
CISO Leadership: Essential Principles for Success
By on Dec 22, 2009
blog
blog
Schneier on Security - the best of rock star of information security
By on Dec 21, 2009
blog
Computer Security: 20 Things Every Employee Should Know
By on Dec 21, 2009
blog
The nmap book: valuable book about an invaluable security tool
By on Dec 18, 2009
blog
Googling Security: How Much Does Google Know About You?
By on Dec 18, 2009
blog
Big brother, much ado about nothing
By on Dec 17, 2009
blog
Dan Geer gets it
By on Dec 17, 2009
blog
The Pragmatic CSO - 12 Steps to Being a Security Master
By on Dec 16, 2009
blog
blog
Beautiful Security: Leading Security Experts Explain How They Think
By on Dec 16, 2009
blog
blog
The Geek Atlas: 128 Places Where Science and Technology Come Alive
By on Dec 15, 2009
blog
Tetraktys is not the world's first cryptographic thriller
By on Dec 14, 2009
blog
blog
What do alcoholic pilots and hackers have in common?
By on Dec 14, 2009
blog
The best information security book I ever read is….
By on Dec 12, 2009
blog
Welcome to the Security Reading Room blog
By on Dec 12, 2009
blog
Book review of Confessions of a Public Speaker
By on Dec 12, 2009
blog
blog
Ben's Book of the Month: Review of "Computer Security and the Internet"
By on Apr 07, 2022
blog
Ben's Book of the Month: Review of "The Security Hippie"
By on Mar 16, 2022
blog
blog
blog
Ben's Book of the Month: Review of "Ransomware Protection Playbook"
By on Nov 30, 2021
Webcast
blog
blog
blog
blog
Ben's Book of the Month: Review of "Do No Harm"
By on Jul 30, 2021
blog
Ben’s Books of the Month: A Hat Trick of Information Security Titles
By on Jun 30, 2021
blog
Ben’s Book of the Month: May 2021 Book Review
By on May 31, 2021
blog
Ben's Book of the Month: "Hacking Multifactor Authentication"
By on Feb 28, 2021
blog
blog
Book review: "The Cyber Attack Survival Manual"
By on Jan 26, 2021
blog
blog
blog
blog
blog
blog
blog
blog
Book review: Stiennon On Security: Collected Essays Volume 1
By on Jul 17, 2020
blog
Ben’s Book of the Month: Review of “Data Breaches: Crisis and Opportunity”
By on Jun 30, 2020
blog
Book Review: PCI DSS: An Integrated Data Security Standard Guide
By on Jun 23, 2020
blog
Ben's Book of The Month: Review of "The Digital Big Bang"
By on May 29, 2020
blog
blog
blog
blog
blog
Bens Book of the Month Review of How to Manage Cybersecurity Risk
By on Feb 28, 2020
blog
blog
Book Review: "SAP Cybersecurity for CISO"
By on Jan 15, 2020
blog
Ben's Book of the Month: Review of "Cryptography Apocalypse"
By on Dec 30, 2019
blog
Ben's Book of the Month: Review of "Permanent Record"
By on Nov 26, 2019
blog
blog
blog
blog
blog
blog
Book review: The Official (ISC)² Guide to the CISSP CBK Reference
By on Jun 18, 2019
blog
blog
blog
Ben's Book Review: "The Linux Command Line: A Complete Introduction"
By on Apr 12, 2019
blog
blog
blog
blog
Millions, Billions, Zillions Defending Yourself in a World of Too Many
By on Dec 17, 2018
blog
blog
blog
blog
blog
blog
blog
blog
blog
presentation
presentation
presentation
Ransomware and Destructive Attacks
On Apr 16, 2018
blog
blog
blog
blog
blog
Book Review: The Woman Who Smashed Codes
By on Jan 19, 2018
blog
blog
blog
blog
blog
blog
blog
Ben's Book of the Month: Review of "The CISO Journey"
By on Aug 31, 2017
blog
blog
blog
The Hardware Hacker: Adventures in Making and Breaking Hardware
By on Jul 17, 2017
blog
Ben's Book of the Month: Review of "Information Security Policies Made Easy"
By on Jun 30, 2017
blog
blog
NTP Security: A Quick-Start Guide
By on May 02, 2017
blog
blog
blog
blog
Ben's Book of the Month: Review of "Hospital and Healthcare Security"
By on Feb 28, 2017
blog
Audio Content Security: Attack Analysis on Audio Watermarking
By on Feb 21, 2017
presentation
Countering Cyberespionage
On Feb 14, 2017
blog
The Security Reading Room: The Best Information Security Books of 2016
By on Feb 05, 2017
blog
Ransomware: Defending Against Digital Extortion
By on Jan 11, 2017
blog
blog
blog
Secure Data Deletion
By on Nov 30, 2016
blog
DNS Security: Defending the Domain Name System
By on Nov 22, 2016
blog
Hack-Proof Your Life Now! The New Cybersecurity Rules
By on Nov 02, 2016
blog
Cybersecurity and Applied Mathematics
By on Oct 26, 2016
blog
blog
Obfuscation: A User's Guide for Privacy and Protest
By on Oct 06, 2016
blog
blog
Bitcoin and Cryptocurrency Technologies: A Comprehensive Introduction
By on Sep 06, 2016
blog
Infrastructure as Code: Managing Servers in the Cloud
By on Aug 19, 2016
blog
Insider Threat: Prevention, Detection, Mitigation, and Deterrence
By on Aug 01, 2016
blog
blog
Pinpoint: How GPS Is Changing Technology, Culture, and Our Minds
By on Jul 05, 2016
blog
blog
How Not to Network a Nation: The Uneasy History of the Soviet Internet
By on Jun 15, 2016
blog
blog
Breakthroughs in Decision Science and Risk Analysis
By on May 03, 2016
blog
Hadoop Security: Protecting Your Big Data Platform
By on May 02, 2016
blog
Hacking for Dummies: Fifth Edition
By on Apr 26, 2016
blog
Bitcoin for Nonmathematicians: Exploring the Foundations of Crypto Payments
By on Apr 19, 2016
blog
Dark Territory: The Secret History of Cyber War
By on Apr 13, 2016
blog
blog
RSA Conference 2016: Security of Public Cloud Services—It Takes a Village
By on Apr 05, 2016
blog
blog
The Car Hacker's Handbook: A Guide for the Penetration Tester
By on Mar 26, 2016
blog
blog
blog
Achieving Digital Trust: The New Rules for Business at the Speed of Light
By on Feb 16, 2016
blog
Essential Cybersecurity Science: Build, Test, and Evaluate Secure Systems
By on Jan 19, 2016
blog
Encryption Made Simple for Lawyers
By on Jan 06, 2016
blog
The Security Reading Room: The Best Information Security Books of 2015
By on Dec 23, 2015
blog
Lights Out: A Cyberattack, A Nation Unprepared, Surviving the Aftermath
By on Dec 02, 2015
blog
Managing Online Risk: Apps, Mobile, and Social Media Security
By on Dec 01, 2015
blog
Security Operations Center: Building, Operating, and Maintaining your SOC
By on Nov 30, 2015
blog
blog
The Network Security Test Lab: A Step-by-Step Guide
By on Nov 04, 2015
blog
blog
Network Attacks and Exploitation: A Framework
By on Oct 02, 2015
blog
blog
Introduction to Social Media Investigation
By on Aug 28, 2015
blog
blog
Digital Identity Management
By on Aug 06, 2015
blog
How Not To Be Hacked: The Definitive Guide for Regular People
By on Jul 30, 2015
blog
Cloud Computing Design Patterns
By on Jul 13, 2015
blog
blog
blog
blog
blog
blog
CSA Guide to Cloud Computing: Implementing Cloud Privacy and Security
By on May 16, 2015
blog
Phishing Dark Waters: The Offensive and Defensive Sides of Malicious Emails
By on Apr 29, 2015
blog
Statistics Done Wrong: The Woefully Complete Guide
By on Apr 08, 2015
blog
blog
Measures and Metrics in Corporate Security
By on Mar 18, 2015
blog
blog
Social Media Security: Leveraging Social Networking While Mitigating Risk
By on Feb 03, 2015
blog
Designing and Building a Security Operations Center
By on Jan 28, 2015
blog
PRAGMATIC Security Metrics - Applying Metametrics to Information Security
By on Jan 27, 2015
blog
The Practical Guide to HIPAA Privacy and Security Compliance
By on Jan 25, 2015
blog
Enterprise Software Security: A Confluence of Disciplines
By on Jan 15, 2015
blog
Cyber Crime and Cyber Terrorism Investigator's Handbook
By on Jan 05, 2015
blog
The best information security book of 2014 and some other excellent ones
By on Dec 29, 2014
blog
Fire in the Valley: The Birth and Death of the Personal Computer
By on Dec 18, 2014
blog
blog
Bulletproof SSL and TLS
By on Nov 24, 2014
blog
blog
Measuring and Managing Information Risk: A FAIR Approach
By on Oct 27, 2014
blog
Official (ISC)2 Guide to the CCFP CBK
By on Oct 21, 2014
blog
Hate Crimes in Cyberspace
By on Oct 14, 2014
blog
Pre-review: Measuring and Managing Information Risk: A FAIR Approach
By on Oct 05, 2014
blog
Targeted Cyber Attacks: Multi-staged Attacks Driven by Exploits and Malware
By on Sep 22, 2014
blog
Architecting the Cloud: Design Decisions for Cloud Computing Service Models
By on Sep 08, 2014
blog
blog
Social Engineering in IT Security: Tools, Tactics, and Techniques
By on Aug 21, 2014
blog
Carry On: Sound Advice from Schneier on Security
By on Aug 11, 2014
blog
Introduction to Cyber-Warfare: A Multidisciplinary Approach
By on Aug 04, 2014
blog
Security Awareness: Applying Practical Security in Your World
By on Jul 22, 2014
blog
Data-Driven Security: Analysis, Visualization and Dashboards
By on Jul 07, 2014
blog
Cyber Crime, Security and Digital Intelligence
By on Jun 30, 2014
blog
blog
Hacking Point of Sale: Payment Application Secrets, Threats, and Solutions
By on May 26, 2014
blog
3 Excellent New Information Security Books - May 2014
By on May 21, 2014
blog
The CISSP Companion Handbook
By on May 15, 2014
blog
Two new basics books from Syngress
By on May 13, 2014
blog
Introduction to Information Security: A Strategic-Based Approach
By on May 07, 2014
blog
blog
Unmasking the Social Engineer: The Human Element of Security
By on Apr 13, 2014
blog
blog
Cyber Attack, CyberCrime, CyberWarfare - CyberComplacency
By on Mar 31, 2014
blog
Threat Modeling: Designing for Security
By on Mar 03, 2014
blog
The Best New Books from RSA Conference 2014
By on Feb 27, 2014
blog
blog
Brainstorming and Beyond: A User-Centered Design Method
By on Jan 26, 2014
blog
The Digital Crown: Winning at Content on the Web
By on Jan 13, 2014
blog
Job Reconnaissance: Using Hacking Skills to Win the Job Hunt Game
By on Jan 06, 2014
blog
Introduction to Computer Networks & Cybersecurity
By on Jan 02, 2014
blog
Digital Archaeology: The Art and Science of Digital Forensics
By on Dec 23, 2013
blog
blog
Engineering Safe and Secure Software Systems
By on Dec 09, 2013
blog
blog
Digital Outcasts: Moving Technology Forward without Leaving People Behind
By on Nov 25, 2013
blog
FISMA Compliance Handbook
By on Nov 17, 2013
blog
Testing Cloud Services: How to Test SaaS, PaaS & IaaS
By on Oct 29, 2013
blog
Secret History: The Story of Cryptology
By on Oct 16, 2013
blog
Java Coding Guidelines: 75 Recommendations for Reliable and Secure Programs
By on Oct 08, 2013
blog
Gupta & Brooks: Using Social Media for Global Security
By on Oct 01, 2013
blog
blog
SCADA and Me
By on Sep 12, 2013
blog
blog
blog
Practical Anonymity: Hiding in Plain Sight Online
By on Aug 29, 2013
blog
Hacking Exposed Mobile: Security Secrets & Solutions
By on Aug 26, 2013
blog
Secret History: The Story of Cryptology
By on Aug 15, 2013
blog
The Healthy Programmer: Get Fit, Feel Better, and Keep Coding
By on Aug 12, 2013
blog
blog
Hacking Exposed Mobile Security Secrets and Solutions
By on Aug 05, 2013
blog
The Healthy Programmer: Get Fit, Feel Better and Keep Coding
By on Aug 01, 2013
blog
Present Yourself: Using SlideShare to Grow Your Business
By on Jul 29, 2013
blog
Cloud Computing: Theory and Practice
By on Jul 22, 2013
blog
Assessing Vendors: A Hands-On Guide to Assessing Infosec and IT Vendors
By on Jul 10, 2013
blog
Cloud Computing: Concepts, Technology & Architecture
By on Jul 07, 2013
blog
blog
blog
blog
Assessing Vendors: A Hands-On Guide to Assessing Infosec & IT Vendors
By on May 30, 2013
blog
blog
Locked Down: Information Security for Lawyers
By on May 20, 2013
blog
The Chinese Information War
By on May 13, 2013
blog
The Plateau Effect: Getting from Stuck to Success
By on May 13, 2013
blog
Secure Coding in C and C++
By on May 07, 2013
blog
Cybersecurity: Public Sector Threats and Responses
By on May 02, 2013
blog
Applied Information Security: A Hands-on Approach
By on Apr 22, 2013
blog
The Death of the Internet - Markus Jakobsson
By on Apr 15, 2013
blog
blog
Introduction to Computer Networks and Cybersecurity
By on Mar 28, 2013
blog
Managing Risk and Information Security: Protect to Enable
By on Mar 20, 2013
blog
PRAGMATIC Security Metrics: Applying Metametrics to Information Security
By on Mar 14, 2013
blog
blog
The Hacker's Guide to OS X: Exploiting OS X from the Root Up
By on Mar 05, 2013
blog
The Phoenix Project
By on Feb 28, 2013
blog
Two new security certification review guides from Microsoft Press
By on Feb 21, 2013
blog
The Design of Rijndael: AES - The Advanced Encryption Standard
By on Feb 19, 2013
blog
Security Engineering: A Guide to Building Dependable Distributed Systems
By on Feb 15, 2013
blog
Using Social Media for Global Security
By on Feb 11, 2013
blog
Low Tech Hacking: Street Smarts for Security Professionals
By on Feb 07, 2013
blog
Computer Security Literacy: Staying Safe in a Digital World
By on Feb 04, 2013
blog
Hacking For Dummies – 4th edition
By on Jan 30, 2013
blog
A Gift of Fire: Social, Legal, and Ethical Issues for Computing Technology
By on Jan 21, 2013
blog
Official (ISC)2 Guide to the CISSP CBK – 3rd edition
By on Jan 16, 2013
blog
blog
Web Application Defender's Cookbook: Battling Hackers and Protecting Users
By on Jan 03, 2013
blog
Virtualization Security: Protecting Virtualized Environments
By on Dec 27, 2012
blog
blog
Engineering Safe and Secure Software Systems
By on Dec 20, 2012
blog
Bad Data Handbook: Cleaning Up The Data So You Can Get Back To Work
By on Dec 18, 2012
blog
blog
Gatekeeper: What's New in OS X Mountain Lion Security
By on Dec 10, 2012
blog
Two great lockpicking books from Deviant Ollam
By on Dec 05, 2012
blog
blog
Two new CISSP books from Shon Harris
By on Nov 20, 2012
blog
Reverse Deception: Organized Cyber Threat Counter-Exploitation
By on Nov 12, 2012
blog
blog
Ethics of Big Data: Balancing Risk and Innovation
By on Nov 01, 2012
blog
Information Security Management Handbook – 2012 edition
By on Oct 25, 2012
blog
blog
Two new lockpicking books from Deviant Ollam
By on Oct 18, 2012
blog
Everyday Cryptography: Fundamental Principles and Applications
By on Oct 15, 2012
blog
CISSP Study Guide, Second Edition
By on Oct 10, 2012
blog
blog
ISO27001 in a Windows Environment
By on Oct 03, 2012
blog
Two new SQL security books from Syngress
By on Sep 27, 2012
blog
Digital Forensics for Handheld Devices
By on Sep 24, 2012
blog
Preview - Everyday Cryptography: Fundamental Principles and Applications
By on Sep 19, 2012
blog
CISSP for Dummies
By on Sep 14, 2012
blog
blog
Preview - Digital Forensics for Handheld Devices
By on Aug 30, 2012
blog
blog
Illustrated Guide to Home Forensic Science Experiments: All Lab, No Lecture
By on Aug 22, 2012
blog
Best Practices for the Destruction of Digital Data
By on Aug 15, 2012
blog
Navigating Social Media Legal Risks: Safeguarding Your Business
By on Aug 14, 2012
blog
The Rise of the Virtual-Plagiarist
By on Aug 13, 2012
blog
Hacking Exposed 7: Network Security Secrets & Solutions
By on Aug 06, 2012
blog
blog
blog
Preview - Reverse Deception Organized Cyber Threat Counter-Exploitation
By on Jul 18, 2012
blog
The 7 Qualities of Highly Secure Software
By on Jul 16, 2012
blog
Preview - Navigating Social Media Legal Risks: Safeguarding Your Business
By on Jul 11, 2012
blog
Cyber Attacks Protecting National Infrastructure
By on Jul 09, 2012
blog
Network Forensics: Tracking Hackers through Cyberspace
By on Jun 28, 2012
blog
Web of Deceit: Misinformation and Manipulation in the Age of Social Media
By on Jun 27, 2012
blog
blog
Wireless Network Security A Beginner's Guide
By on Jun 18, 2012
blog
blog
Security and Privacy for Microsoft Office 2010 Users
By on May 24, 2012
blog
Elementary Information Security
By on May 18, 2012
blog
blog
Fitness for Geeks: Real Science, Great Nutrition and Good Health
By on Apr 30, 2012
blog
The Woman Who Wasn't There: The True Story of an Incredible Deception
By on Apr 23, 2012
blog
Preview - Cyber Security Policy Guidebook
By on Apr 20, 2012
blog
blog
Preview - Information Security Policies Made Easy Version 12
By on Apr 16, 2012
blog
Preview - Security Strategies in Web Applications and Social Networking
By on Apr 04, 2012
blog
Microsoft Manual of Style
By on Mar 21, 2012
blog
The Shpantzer Interview Technique
By on Mar 20, 2012
blog
In memory of Hal Tipton
By on Mar 18, 2012
blog
Preview - Cyber Attacks: Protecting National Infrastructure
By on Mar 11, 2012
blog
blog
Preview - Microsoft Manual of Style
By on Feb 27, 2012
blog
Liars and Outliers: Enabling the Trust that Society Needs to Thrive
By on Feb 22, 2012
blog
blog
Preventing Good People From Doing Bad Things: Implementing Least Privilege
By on Feb 12, 2012
blog
Preview - Low Tech Hacking: Street Smarts for Security Professionals
By on Feb 06, 2012
blog
Preview - Elementary Information Security
By on Feb 05, 2012
blog
To the Cloud: Cloud Powering an Enterprise
By on Jan 31, 2012
blog
The Tangled Web: A Guide to Securing Modern Web Applications
By on Jan 25, 2012
blog
blog
blog
Preview - The Tangled Web: A Guide to Securing Modern Web Applications
By on Jan 08, 2012
blog
Metasploit: The Penetration Tester's Guide
By on Jan 03, 2012
blog
blog
Preview - Privacy and Big Data
By on Dec 11, 2011
blog
Preview - Mindfire: Big Ideas for Curious Minds
By on Dec 04, 2011
blog
Goedel's Way: Exploits into an undecidable world
By on Dec 01, 2011
blog
The CERT Oracle Secure Coding Standard for Java
By on Nov 30, 2011
blog
blog
Digital Forensics for Legal Professionals
By on Nov 20, 2011
blog
Securing the Clicks Network Security in the Age of Social Media
By on Nov 04, 2011
blog
Preview - Auditing Cloud Computing: A Security and Privacy Guide
By on Nov 03, 2011
blog
blog
blog
blog
Preview - The CERT Oracle Secure Coding Standard for Java
By on Oct 11, 2011
blog
Preview - Two new pen test books from Syngress
By on Oct 06, 2011
blog
Preview - The Cloud Security Rules
By on Oct 05, 2011
blog
blog
blog
Two new information security books from Syngress
By on Sep 13, 2011
blog
Preview - Biometrics in Identity Management: Concepts to Applications
By on Sep 08, 2011
blog
Preview - Metasploit: The Penetration Tester's Guide
By on Sep 04, 2011
blog
Ghost in the Wires: My Adventures as the World's Most Wanted Hacker
By on Aug 26, 2011
blog
blog
blog
blog
blog
Securing the Cloud: Cloud Computer Security Techniques and Tactics
By on Jul 19, 2011
blog
Lessons from LIGATT
By on Jul 11, 2011
blog
Surveillance or Security?: The Risks Posed by New Wiretapping Technologies
By on Jul 08, 2011
blog
Preview - Cisco Firewalls
By on Jul 01, 2011
blog
3 new forensics books from Syngress
By on Jun 29, 2011
blog
Preview - Digital Evidence and Computer Crime
By on Jun 28, 2011
blog
blog
blog
blog
blog
Vulnerability Management
By on May 13, 2011
blog
Global Terrorism and New Media: The Post-Al Qaeda Generation
By on May 01, 2011
blog
Network Security Auditing
By on Apr 27, 2011
blog
Preview - Adaptive Security Management Architecture
By on Apr 08, 2011
blog
15 Minutes Including Q&A: A Plan to Save the World From Lousy Presentations
By on Apr 04, 2011
blog
Kevin Mitnick is coming out with a new book
By on Mar 29, 2011
blog
Social Engineering: The Art of Human Hacking
By on Mar 09, 2011
blog
Everything I need to know about PowerPoint, I learned from Adi Shamir
By on Mar 03, 2011
blog
Security Information and Event Management (SIEM) Implementation
By on Feb 24, 2011
blog
On the road, live from RSA 2011
By on Feb 22, 2011
blog
The top 5 security books at RSA 2011 from the Security Reading Room
By on Feb 18, 2011
blog
blog
Vein Pattern Recognition: A Privacy-Enhancing Biometric
By on Feb 03, 2011
blog
Computer Incident Response and Product Security
By on Jan 24, 2011
blog
Preview - Implementing ISO27001 in a Windows Environment
By on Jan 13, 2011
blog
Securing the Smart Grid: Next Generation Power Grid Security
By on Jan 05, 2011
blog
Preview - Computer Incident Response and Product Security
By on Dec 17, 2010
blog
Deceptive email - this time from SAP
By on Dec 07, 2010
blog
Preview - Securing the Smart Grid: Next Generation Power Grid Security
By on Dec 07, 2010
blog
Quick look - Understanding Amazon book reviews
By on Dec 06, 2010
blog
Cryptography Engineering: Design Principles and Practical Applications
By on Dec 01, 2010
blog
VeriSign marketing - they listen
By on Nov 18, 2010
blog
Security Strategy: From Requirements to Reality
By on Nov 15, 2010
blog
CyberForensics: Understanding Information Security Investigations
By on Oct 27, 2010
blog
What’s with VeriSign and their deceptive marketing tactics?
By on Oct 26, 2010
blog
Preview - CyberForensics: Understanding Information Security Investigations
By on Oct 20, 2010
blog
blog
Is writing certification guides a replacement for psychotherapy?
By on Oct 06, 2010
blog
blog
Preview - Hacking For Dummies - 3rd edition
By on Sep 08, 2010
blog
The Executive MBA in Information Security
By on Sep 01, 2010
blog
Is 2010 the year of the plagiarized security book?
By on Aug 19, 2010
blog
blog
Best Damn Cybercrime and Digital Forensics Book Period
By on Jul 01, 2010
blog
Outsourcing SAP Operations
By on Jun 21, 2010
blog
The Psychology of Safety
By on Jun 18, 2010
blog
Fair use, plagiarism and the World’s No. 1 Hacker book
By on Jun 14, 2010
blog
How To Become The Worlds No. 1 Hacker
By on Jun 10, 2010
blog
Webinar June 29 - Effective Data Destruction Practices
By on Jun 09, 2010
blog
Webinar June 8 - Effective Data Destruction Practices
By on Jun 03, 2010
blog
Books from SAP Press
By on May 25, 2010
blog
Preview - Vein Pattern Recognition: A Privacy-Enhancing Biometric
By on May 22, 2010
blog
The Illusion of Due Diligence
By on Apr 28, 2010
blog
blog
How to build a safety culture in three steps
By on Apr 14, 2010
blog
blog
On the Road at RSA 2010 – interviews of thought leaders from the conference
By on Mar 19, 2010
blog
My slides from the PechaKucha (PK) Happy Hour
By on Mar 05, 2010
blog
Tales from the Info Security Reading Room
By on Mar 04, 2010
blog
blog
The Myth of Homeland Security
By on Feb 25, 2010
blog
Building Secure Software: How to Avoid Security Problems the Right Way
By on Feb 25, 2010
blog
On deceptive email I get from VeriSign
By on Feb 19, 2010
blog
blog
Security Warrior
By on Feb 17, 2010
blog
Forensic Discovery
By on Feb 16, 2010
blog
Managing an Information Security and Privacy Awareness and Training Program
By on Feb 12, 2010
blog
Cryptography for Dummies
By on Feb 11, 2010
blog
Hacking For Dummies
By on Feb 10, 2010
blog
Outsourcing Information Security
By on Feb 09, 2010
blog
blog
blog
blog
The German Enigma Cipher Machine: Beginnings, Success, and Ultimate Failure
By on Feb 01, 2010
blog
blog
Brute Force: Cracking the Data Encryption Standard
By on Jan 28, 2010
blog
Expert Network Time Protocol: An Experience in Time with NTP
By on Jan 28, 2010
blog
blog
The Social Media Marketing Book
By on Jan 22, 2010
blog
blog
Cryptography in the Database: The Last Line of Defense
By on Jan 22, 2010
blog
Digital Identity
By on Jan 22, 2010
blog
Securing IM and P2P Applications for the Enterprise
By on Jan 21, 2010
blog
Web Mapping Illustrated: Using Open Source GIS Toolkits
By on Jan 21, 2010
blog
Free Lunch 2010: Why Public Algorithms Beat the Alternative
By on Jan 21, 2010
blog
The Software Vulnerability Guide
By on Jan 19, 2010
blog
19 Deadly Sins of Software Security: Programming Flaws and How to Fix Them
By on Jan 19, 2010
blog
Computer Network Time Synchronization: The Network Time Protocol
By on Jan 19, 2010
blog
e-Book: PCI Compliance for Dummies
By on Jan 18, 2010
blog
Handbook of Applied Cryptography - available free online
By on Jan 18, 2010
blog
RSA Crypto FAQ
By on Jan 18, 2010
blog
How to Cheat at Managing Information Security
By on Jan 14, 2010
blog
PGP & GPG: Email for the Practical Paranoid
By on Jan 14, 2010
blog
Protect Your Windows Network: From Perimeter to Data
By on Jan 14, 2010
blog
The Privacy Management Toolkit
By on Jan 13, 2010
blog
blog
Information Security Policies Made Easy
By on Jan 13, 2010
blog
Why Software Sucks...and What You Can Do About It
By on Jan 12, 2010
blog
blog
In Search of Stupidity: Over Twenty Years of High Tech Marketing Disasters
By on Jan 12, 2010
blog
blog
blog
Preview - The Social Media Marketing Book
By on Jan 08, 2010
blog
blog
Enterprise Security for the Executive: Setting the Tone from the Top
By on Jan 06, 2010
blog
Security Power Tools
By on Jan 05, 2010
blog
Terminal Chaos: Why U.S. Air Travel Is Broken and How to Fix It
By on Jan 05, 2010
blog
blog
Security Metrics: Replacing Fear, Uncertainty, and Doubt
By on Jan 04, 2010
blog
Software Security: Building Security In
By on Jan 04, 2010
blog
Stealing Your Life: The Ultimate Identity Theft Prevention Plan
By on Jan 04, 2010
blog
blog
Forensic Accounting and Fraud Investigation for Non-Experts
By on Dec 31, 2009
blog
Plane Simple Truth: Clearing the air on aviation's environmental impact
By on Dec 31, 2009
blog
Touching the World of Angels; How My Daughter's Short Life Changed Mine
By on Dec 30, 2009
blog
Building an Effective Information Security Policy Architecture
By on Dec 30, 2009
blog
Counterdeception Principles and Applications for National Security
By on Dec 30, 2009
blog
The New School of Information Security
By on Dec 28, 2009
blog
Geekonomics: The Real Cost of Insecure Software
By on Dec 28, 2009
blog
blog
blog
Biometrics For Dummies
By on Dec 23, 2009
blog
Exploiting Online Games: Cheating Massively Distributed Systems
By on Dec 23, 2009
blog
Transportation and Cargo Security: Threats and Solutions
By on Dec 22, 2009
blog
Trick or Treatment: The Undeniable Facts about Alternative Medicine
By on Dec 22, 2009
blog
CISO Leadership: Essential Principles for Success
By on Dec 22, 2009
blog
blog
Schneier on Security - the best of rock star of information security
By on Dec 21, 2009
blog
Computer Security: 20 Things Every Employee Should Know
By on Dec 21, 2009
blog
The nmap book: valuable book about an invaluable security tool
By on Dec 18, 2009
blog
Googling Security: How Much Does Google Know About You?
By on Dec 18, 2009
blog
Big brother, much ado about nothing
By on Dec 17, 2009
blog
Dan Geer gets it
By on Dec 17, 2009
blog
The Pragmatic CSO - 12 Steps to Being a Security Master
By on Dec 16, 2009
blog
blog
Beautiful Security: Leading Security Experts Explain How They Think
By on Dec 16, 2009
blog
blog
The Geek Atlas: 128 Places Where Science and Technology Come Alive
By on Dec 15, 2009
blog
Tetraktys is not the world's first cryptographic thriller
By on Dec 14, 2009
blog
blog
What do alcoholic pilots and hackers have in common?
By on Dec 14, 2009
blog
The best information security book I ever read is….
By on Dec 12, 2009
blog
Welcome to the Security Reading Room blog
By on Dec 12, 2009
blog
Book review of Confessions of a Public Speaker
By on Dec 12, 2009
blog
blog
Ben's Book of the Month: Review of "Computer Security and the Internet"
By on Apr 07, 2022
blog
Ben's Book of the Month: Review of "The Security Hippie"
By on Mar 16, 2022
blog
blog
blog
Ben's Book of the Month: Review of "Ransomware Protection Playbook"
By on Nov 30, 2021
Webcast
blog
blog
blog
blog
Ben's Book of the Month: Review of "Do No Harm"
By on Jul 30, 2021
blog
Ben’s Books of the Month: A Hat Trick of Information Security Titles
By on Jun 30, 2021
blog
Ben’s Book of the Month: May 2021 Book Review
By on May 31, 2021
blog
Ben's Book of the Month: "Hacking Multifactor Authentication"
By on Feb 28, 2021
blog
blog
Book review: "The Cyber Attack Survival Manual"
By on Jan 26, 2021
blog
blog
blog
blog
blog
blog
blog
blog
Book review: Stiennon On Security: Collected Essays Volume 1
By on Jul 17, 2020
blog
Ben’s Book of the Month: Review of “Data Breaches: Crisis and Opportunity”
By on Jun 30, 2020
blog
Book Review: PCI DSS: An Integrated Data Security Standard Guide
By on Jun 23, 2020
blog
Ben's Book of The Month: Review of "The Digital Big Bang"
By on May 29, 2020
blog
blog
blog
blog
blog
Bens Book of the Month Review of How to Manage Cybersecurity Risk
By on Feb 28, 2020
blog
blog
Book Review: "SAP Cybersecurity for CISO"
By on Jan 15, 2020
blog
Ben's Book of the Month: Review of "Cryptography Apocalypse"
By on Dec 30, 2019
blog
Ben's Book of the Month: Review of "Permanent Record"
By on Nov 26, 2019
blog
blog
blog
blog
blog
blog
Book review: The Official (ISC)² Guide to the CISSP CBK Reference
By on Jun 18, 2019
blog
blog
blog
Ben's Book Review: "The Linux Command Line: A Complete Introduction"
By on Apr 12, 2019
blog
blog
blog
blog
Millions, Billions, Zillions Defending Yourself in a World of Too Many
By on Dec 17, 2018
blog
blog
blog
blog
blog
blog
blog
blog
blog
presentation
presentation
presentation
Ransomware and Destructive Attacks
On Apr 16, 2018
blog
blog
blog
blog
blog
Book Review: The Woman Who Smashed Codes
By on Jan 19, 2018
blog
blog
blog
blog
blog
blog
blog
Ben's Book of the Month: Review of "The CISO Journey"
By on Aug 31, 2017
blog
blog
blog
The Hardware Hacker: Adventures in Making and Breaking Hardware
By on Jul 17, 2017
blog
Ben's Book of the Month: Review of "Information Security Policies Made Easy"
By on Jun 30, 2017
blog
blog
NTP Security: A Quick-Start Guide
By on May 02, 2017
blog
blog
blog
blog
Ben's Book of the Month: Review of "Hospital and Healthcare Security"
By on Feb 28, 2017
blog
Audio Content Security: Attack Analysis on Audio Watermarking
By on Feb 21, 2017
presentation
Countering Cyberespionage
On Feb 14, 2017
blog
The Security Reading Room: The Best Information Security Books of 2016
By on Feb 05, 2017
blog
Ransomware: Defending Against Digital Extortion
By on Jan 11, 2017
blog
blog
blog
Secure Data Deletion
By on Nov 30, 2016
blog
DNS Security: Defending the Domain Name System
By on Nov 22, 2016
blog
Hack-Proof Your Life Now! The New Cybersecurity Rules
By on Nov 02, 2016
blog
Cybersecurity and Applied Mathematics
By on Oct 26, 2016
blog
blog
Obfuscation: A User's Guide for Privacy and Protest
By on Oct 06, 2016
blog
blog
Bitcoin and Cryptocurrency Technologies: A Comprehensive Introduction
By on Sep 06, 2016
blog
Infrastructure as Code: Managing Servers in the Cloud
By on Aug 19, 2016
blog
Insider Threat: Prevention, Detection, Mitigation, and Deterrence
By on Aug 01, 2016
blog
blog
Pinpoint: How GPS Is Changing Technology, Culture, and Our Minds
By on Jul 05, 2016
blog
blog
How Not to Network a Nation: The Uneasy History of the Soviet Internet
By on Jun 15, 2016
blog
blog
Breakthroughs in Decision Science and Risk Analysis
By on May 03, 2016
blog
Hadoop Security: Protecting Your Big Data Platform
By on May 02, 2016
blog
Hacking for Dummies: Fifth Edition
By on Apr 26, 2016
blog
Bitcoin for Nonmathematicians: Exploring the Foundations of Crypto Payments
By on Apr 19, 2016
blog
Dark Territory: The Secret History of Cyber War
By on Apr 13, 2016
blog
blog
RSA Conference 2016: Security of Public Cloud Services—It Takes a Village
By on Apr 05, 2016
blog
blog
The Car Hacker's Handbook: A Guide for the Penetration Tester
By on Mar 26, 2016
blog
blog
blog
Achieving Digital Trust: The New Rules for Business at the Speed of Light
By on Feb 16, 2016
blog
Essential Cybersecurity Science: Build, Test, and Evaluate Secure Systems
By on Jan 19, 2016
blog
Encryption Made Simple for Lawyers
By on Jan 06, 2016
blog
The Security Reading Room: The Best Information Security Books of 2015
By on Dec 23, 2015
blog
Lights Out: A Cyberattack, A Nation Unprepared, Surviving the Aftermath
By on Dec 02, 2015
blog
Managing Online Risk: Apps, Mobile, and Social Media Security
By on Dec 01, 2015
blog
Security Operations Center: Building, Operating, and Maintaining your SOC
By on Nov 30, 2015
blog
blog
The Network Security Test Lab: A Step-by-Step Guide
By on Nov 04, 2015
blog
blog
Network Attacks and Exploitation: A Framework
By on Oct 02, 2015
blog
blog
Introduction to Social Media Investigation
By on Aug 28, 2015
blog
blog
Digital Identity Management
By on Aug 06, 2015
blog
How Not To Be Hacked: The Definitive Guide for Regular People
By on Jul 30, 2015
blog
Cloud Computing Design Patterns
By on Jul 13, 2015
blog
blog
blog
blog
blog
blog
CSA Guide to Cloud Computing: Implementing Cloud Privacy and Security
By on May 16, 2015
blog
Phishing Dark Waters: The Offensive and Defensive Sides of Malicious Emails
By on Apr 29, 2015
blog
Statistics Done Wrong: The Woefully Complete Guide
By on Apr 08, 2015
blog
blog
Measures and Metrics in Corporate Security
By on Mar 18, 2015
blog
blog
Social Media Security: Leveraging Social Networking While Mitigating Risk
By on Feb 03, 2015
blog
Designing and Building a Security Operations Center
By on Jan 28, 2015
blog
PRAGMATIC Security Metrics - Applying Metametrics to Information Security
By on Jan 27, 2015
blog
The Practical Guide to HIPAA Privacy and Security Compliance
By on Jan 25, 2015
blog
Enterprise Software Security: A Confluence of Disciplines
By on Jan 15, 2015
blog
Cyber Crime and Cyber Terrorism Investigator's Handbook
By on Jan 05, 2015
blog
The best information security book of 2014 and some other excellent ones
By on Dec 29, 2014
blog
Fire in the Valley: The Birth and Death of the Personal Computer
By on Dec 18, 2014
blog
blog
Bulletproof SSL and TLS
By on Nov 24, 2014
blog
blog
Measuring and Managing Information Risk: A FAIR Approach
By on Oct 27, 2014
blog
Official (ISC)2 Guide to the CCFP CBK
By on Oct 21, 2014
blog
Hate Crimes in Cyberspace
By on Oct 14, 2014
blog
Pre-review: Measuring and Managing Information Risk: A FAIR Approach
By on Oct 05, 2014
blog
Targeted Cyber Attacks: Multi-staged Attacks Driven by Exploits and Malware
By on Sep 22, 2014
blog
Architecting the Cloud: Design Decisions for Cloud Computing Service Models
By on Sep 08, 2014
blog
blog
Social Engineering in IT Security: Tools, Tactics, and Techniques
By on Aug 21, 2014
blog
Carry On: Sound Advice from Schneier on Security
By on Aug 11, 2014
blog
Introduction to Cyber-Warfare: A Multidisciplinary Approach
By on Aug 04, 2014
blog
Security Awareness: Applying Practical Security in Your World
By on Jul 22, 2014
blog
Data-Driven Security: Analysis, Visualization and Dashboards
By on Jul 07, 2014
blog
Cyber Crime, Security and Digital Intelligence
By on Jun 30, 2014
blog
blog
Hacking Point of Sale: Payment Application Secrets, Threats, and Solutions
By on May 26, 2014
blog
3 Excellent New Information Security Books - May 2014
By on May 21, 2014
blog
The CISSP Companion Handbook
By on May 15, 2014
blog
Two new basics books from Syngress
By on May 13, 2014
blog
Introduction to Information Security: A Strategic-Based Approach
By on May 07, 2014
blog
blog
Unmasking the Social Engineer: The Human Element of Security
By on Apr 13, 2014
blog
blog
Cyber Attack, CyberCrime, CyberWarfare - CyberComplacency
By on Mar 31, 2014
blog
Threat Modeling: Designing for Security
By on Mar 03, 2014
blog
The Best New Books from RSA Conference 2014
By on Feb 27, 2014
blog
blog
Brainstorming and Beyond: A User-Centered Design Method
By on Jan 26, 2014
blog
The Digital Crown: Winning at Content on the Web
By on Jan 13, 2014
blog
Job Reconnaissance: Using Hacking Skills to Win the Job Hunt Game
By on Jan 06, 2014
blog
Introduction to Computer Networks & Cybersecurity
By on Jan 02, 2014
blog
Digital Archaeology: The Art and Science of Digital Forensics
By on Dec 23, 2013
blog
blog
Engineering Safe and Secure Software Systems
By on Dec 09, 2013
blog
blog
Digital Outcasts: Moving Technology Forward without Leaving People Behind
By on Nov 25, 2013
blog
FISMA Compliance Handbook
By on Nov 17, 2013
blog
Testing Cloud Services: How to Test SaaS, PaaS & IaaS
By on Oct 29, 2013
blog
Secret History: The Story of Cryptology
By on Oct 16, 2013
blog
Java Coding Guidelines: 75 Recommendations for Reliable and Secure Programs
By on Oct 08, 2013
blog
Gupta & Brooks: Using Social Media for Global Security
By on Oct 01, 2013
blog
blog
SCADA and Me
By on Sep 12, 2013
blog
blog
blog
Practical Anonymity: Hiding in Plain Sight Online
By on Aug 29, 2013
blog
Hacking Exposed Mobile: Security Secrets & Solutions
By on Aug 26, 2013
blog
Secret History: The Story of Cryptology
By on Aug 15, 2013
blog
The Healthy Programmer: Get Fit, Feel Better, and Keep Coding
By on Aug 12, 2013
blog
blog
Hacking Exposed Mobile Security Secrets and Solutions
By on Aug 05, 2013
blog
The Healthy Programmer: Get Fit, Feel Better and Keep Coding
By on Aug 01, 2013
blog
Present Yourself: Using SlideShare to Grow Your Business
By on Jul 29, 2013
blog
Cloud Computing: Theory and Practice
By on Jul 22, 2013
blog
Assessing Vendors: A Hands-On Guide to Assessing Infosec and IT Vendors
By on Jul 10, 2013
blog