Image
 
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 23 guests and 1 member online
EH-Net Donations

Enter Amount:
$

Google Ads
ChicagoCon 2008f
chicagocon2008f_125x200banner.jpg
ChicagoCon 2008f
EH-Net News Feeds
Latest Additions
Book Recommendations





 
Advertisement

You are here: Home arrow Forum arrow Featuresarrow Opinionsarrow 1st 5 Books for newbie
Ethical Hacker Community Forums
August 30, 2008, 08:01:31 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Registration Now Open for ChicagoCon 2008f Oct 27 - Nov 2! Visit www.chicagocon.com.
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: 1st 5 Books for newbie  (Read 2289 times)
0 Members and 1 Guest are viewing this topic.
saintp
Newbie
*
Offline Offline

Posts: 1


View Profile
« on: July 22, 2008, 07:25:16 PM »

What are the first 5 books that someone new to the Information Security Field should read?
Logged
oneeyedcarmen
Full Member
***
Offline Offline

Posts: 202

Klaatu, Borada,Necktie?


View Profile
« Reply #1 on: July 23, 2008, 08:04:42 AM »

Dr. Strangegoogle or: How I Learned to Stop Worrying and use the Search Field, by Chris Gates   Grin

In all seriousness, though, check out this thread which has some pretty good advice on getting started.

Some books to check out, in no particular order:

The Art of Deception, by Kevin Mitnick, et al.
Hacking for Dummies, by Kevin Beaver
Google Hacking for Penetration Testers, Vol. 2, by Johnny Long
Hacking Exposed, Vol.5, by McClure, Scambray & Kurtz

Then pick book or three on programming.  No need to become an expert programmer right away, but it'll at least help to understand what it is you're looking at.  Then you can start writing your own exploit code.
Logged

MCP, Security+, Associate (ISC)2
RobMongoose
Newbie
*
Offline Offline

Posts: 28



View Profile WWW
« Reply #2 on: July 23, 2008, 12:01:52 PM »

I'd also check out the Stealing the Network series. Accurate yet enjoyable to read  Smiley
Blogs and web sites might be the best place to start though as infosec books tend to be a bit expensive...
Logged

Mutterings of an evil genius in training -
http://robmongoose.blogspot.com/
oneeyedcarmen
Full Member
***
Offline Offline

Posts: 202

Klaatu, Borada,Necktie?


View Profile
« Reply #3 on: July 23, 2008, 01:02:12 PM »

Quote from: RobMongoose
Blogs and web sites might be the best place to start though as infosec books tend to be a bit expensive...

That, and they are rarely up to date...at least for very long.  But if you're just trying to get the basics, to teach your mind to think in certain ways, the used books off of Amazon or other vendors can be a good start.

And they look good on the bookshelf, just make sure you dust them because it will gather  Wink
Logged

MCP, Security+, Associate (ISC)2
mad_irish
Newbie
*
Offline Offline

Posts: 8



View Profile WWW
« Reply #4 on: August 14, 2008, 09:47:10 AM »

The Art of Software Security Assessment by Dowd, McDonald and Schuh
-Wonderful overall assessment of the modern state of security (this book is HUGE)

Network Security Assessment by Chris McNabb
-This O'Reilly book is one of the best hands on guides I've found.

Linux Hacker Tools by Ivan Sklyarov
-This book explains how to build tools yourself, and in the process explores a lot of the underpinnings of many such tools.

Hacking, the Art of Exploitation by Erickson
-This is a great book that goes through a lot of hands on exercises valuable to penn testers.

Security in Computing by Pfleeger and Pfleeger
-The obligatory textbook to cover everything not covered above Smiley

I have to disagree with some of the other recommendations.  I find the Hacking Exposed series has jumped the shark and tries to be too much for too many people.  You get a real scattershot with that book in the latest edition.  I found Art of Deception to be interesting, but it's all about social engineering.  I'm not sure that would be in my top 5 for penn testers (I think finding technical security holes is more valuable to penn test clients, but that's just my opinion).

I do agree that a programming book or twenty are useful.  At the very least you should memorize the O'Reilly Practical C Programming by Loudon.  If you don't know how to program in a language or use a technology you have to rely on tools to find vulnerabilities.  Building Secure Software by McGraw and Viega is an invaluable resource.

http://www.MadIrish.net

Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.5 | SMF © 2006-2008, Simple Machines LLC
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.037 seconds with 22 queries.
 
Polls
Best for daily desktop use:
 
Support EH-Net
chicagocon2008f_125x200banner.jpg
ChicagoCon 2008f


Support EH-Net by
Buying all of your
Amazon items using
the search bar above.

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!
Recent Forum Topics
Vote For EH-Net

progenic.com
Click here to Vote!

Sadikhov.com
Top IT Cert Sites

binarica.com
Binarica Logo

Add to Technorati Favorites
technorati fave

chicagocon2008f_125x200banner.jpg
ChicagoCon 2008f
 
         
Advertisement

© 2008 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.