๐Review Incoming...
This week, we dive into GRC. Andrew Chrostowski provides a Hall of Fame Rec for ๐๐๐ ๐พ๐ฎ๐๐๐ง๐จ๐๐๐ช๐ง๐๐ฉ๐ฎ ๐๐ช๐๐๐ ๐ฉ๐ค ๐๐ค๐ซ๐๐ง๐ฃ๐๐ฃ๐๐, ๐๐๐จ๐ , ๐๐ฃ๐ ๐พ๐ค๐ข๐ฅ๐ก๐๐๐ฃ๐๐ by Jason Edwards and Griffin Weaver.
Andrew's review ๐ https://cybercanon.org/the-cybersecurity-guide-to-governance-risk-and-compliance/
๐ต๏ธโโ๏ธ๐๐ฟ๐ฒ๐๐ต ๐ฅ๐ฒ๐๐ถ๐ฒ๐ ๐๐ฟ๐ผ๐ฝ!
This week, Jeff Schiemann provides a Hall of Fame recommendation of ๐๐๐ ๐๐๐ฏ๐๐ง๐ช๐จ ๐๐๐๐จ๐ฉ, written by the accomplished investigative journalist, Geoff White.
You don't want to miss this one: https://cybercanon.org/the-lazarus-heist-from-hollywood-to-high-finance-inside-north-koreas-global-cyber-war/
๐ Consider supporting the Canon by purchasing the book through our Affiliate link here: https://amzn.to/48dAaSo
At our November Committee Review Meeting, members Dr. Georgianna (George) Shea and Adrian Sanabria each led in-depth discussions of Hall of Fame candidate books.
These reads are quite different from each other: critical infrastructure and building a cyber startup. The reviews were published in 2024, but some readers might have missed them, so it's a good idea to check them out:
๐ญ George discussed ๐พ๐ค๐ช๐ฃ๐ฉ๐๐ง๐๐ฃ๐ ๐พ๐ฎ๐๐๐ง ๐๐๐๐ค๐ฉ๐๐๐: ๐๐ฃ๐ฉ๐ง๐ค๐๐ช๐๐๐ฃ๐ ๐พ๐ค๐ฃ๐จ๐๐ฆ๐ช๐๐ฃ๐๐-๐ฟ๐ง๐๐ซ๐๐ฃ, ๐พ๐ฎ๐๐๐ง-๐๐ฃ๐๐ค๐ง๐ข๐๐ ๐๐ฃ๐๐๐ฃ๐๐๐ง๐๐ฃ๐ (๐พ๐พ๐) by Andrew Bochman and Sarah Freeman ๐ https://cybercanon.org/countering-cyber-sabotage-introducing-consequence-driven-cyber-informed-engineering-cce/
๐๏ธ Adrian shared Ross Haleliuk's ๐พ๐ฎ๐๐๐ง ๐๐ค๐ง ๐ฝ๐ช๐๐ก๐๐๐ง๐จ: ๐๐๐ ๐๐จ๐จ๐๐ฃ๐ฉ๐๐๐ก ๐๐ช๐๐๐ ๐ฉ๐ค ๐ฝ๐ช๐๐ก๐๐๐ฃ๐ ๐ ๐พ๐ฎ๐๐๐ง๐จ๐๐๐ช๐ง๐๐ฉ๐ฎ ๐๐ฉ๐๐ง๐ฉ๐ช๐ฅ ๐ https://cybercanon.org/cyber-for-builders/
The discussions around these books were great timing, as the other main topic of the meeting was preparing for the upcoming annual hall of fame๐๏ธvoting session. Our favorite time of year, so stay tuned!
#CybersecurityBooks #CyberCanonHoFCandidate
CRC Press | Venture in Security
@sawaba
๐๐ก๐ฒ๐ ๐ฅ๐ฒ๐๐ถ๐ฒ๐ ๐๐ฟ๐ผ๐ฝ ๐
This week, Jeny Teheran discusses why Dr. Susan Landauโs ๐๐๐จ๐ฉ๐๐ฃ๐๐ฃ๐ ๐๐ฃ is a must-read exploration of privacy, encryption, and the ongoing struggle over government access to secure systems. Being clear, timely, and essential, she recommends it for the CyberCanon Hall of Fame.
๐Review: https://cybercanon.org/listening-in-cybersecurity-in-an-insecure-age/
๐๏ธTo purchase and give 4% back to the Canon, please consider using our affiliate link: https://amzn.to/4oDAWxQ
#CybersecurityBooks #DataPrivacy #Encryption #CyberCanonHoFCandidate Yale University Press
๐จ๐๐ฒ๐ฐ๐ฟ๐๐ฝ๐๐ถ๐ป๐ด ๐ฎ ๐ป๐ฒ๐ ๐ฟ๐ฒ๐ฎ๐ฑ...
โ๐๐ถ๐ฎ๐ข๐ด๐ด๐ฐ๐ฏ, ๐ข ๐ด๐ฆ๐ข๐ด๐ฐ๐ฏ๐ฆ๐ฅ ๐ค๐ณ๐บ๐ฑ๐ต๐ฐ๐จ๐ณ๐ข๐ฑ๐ฉ๐ฆ๐ณ ๐ข๐ฏ๐ฅ ๐ข๐ถ๐ต๐ฉ๐ฐ๐ณ, ๐ฉ๐ข๐ด ๐ฃ๐ญ๐ข๐ป๐ฆ๐ฅ ๐ต๐ฉ๐ฆ ๐ต๐ณ๐ข๐ช๐ญ ๐ฃ๐บ ๐ธ๐ณ๐ช๐ต๐ช๐ฏ๐จ ๐ข ๐ฅ๐ช๐ค๐ต๐ช๐ฐ๐ฏ๐ข๐ณ๐บ ๐ฐ๐ง ๐ค๐ณ๐บ๐ฑ๐ต๐ฐ๐จ๐ณ๐ข๐ฑ๐ฉ๐บ.(..) ๐๐ญ๐ต๐ฉ๐ฐ๐ถ๐จ๐ฉ ๐ช๐ต ๐ช๐ด ๐ข ๐ฅ๐ช๐ค๐ต๐ช๐ฐ๐ฏ๐ข๐ณ๐บ, ๐ต๐ฉ๐ฆ ๐ฃ๐ฐ๐ฐ๐ฌ ๐ช๐ด ๐ธ๐ณ๐ช๐ต๐ต๐ฆ๐ฏ ๐ด๐ฐ ๐ช๐ฏ๐ต๐ฆ๐ณ๐ฆ๐ด๐ต๐ช๐ฏ๐จ๐ญ๐บ ๐ต๐ฉ๐ข๐ต ๐ช๐ต ๐ธ๐ฐ๐ถ๐ญ๐ฅ ๐ฏ๐ฐ๐ต ๐ฃ๐ฆ ๐ข๐ฏ ๐ฐ๐ท๐ฆ๐ณ๐ด๐ต๐ข๐ต๐ฆ๐ฎ๐ฆ๐ฏ๐ต ๐ต๐ฐ ๐ด๐ข๐บ ๐ต๐ฉ๐ข๐ต ๐๐ณ. ๐๐ฆ๐ข๐ฏ-๐๐ฉ๐ช๐ญ๐ช๐ฑ๐ฑ๐ฆ ๐๐ถ๐ฎ๐ข๐ด๐ด๐ฐ๐ฏ ๐ช๐ด ๐ต๐ฉ๐ฆ ๐๐ต๐ฆ๐ท๐ฆ๐ฏ ๐๐ฑ๐ช๐ฆ๐ญ๐ฃ๐ฆ๐ณ๐จ ๐ฐ๐ง ๐ค๐ณ๐บ๐ฑ๐ต๐ฐ๐จ๐ณ๐ข๐ฑ๐ฉ๐บ. ๐๐ ๐ฌ๐ฏ๐ฐ๐ธ๐ด ๐ฉ๐ฐ๐ธ ๐ต๐ฐ ๐ต๐ฆ๐ญ๐ญ ๐ข ๐ด๐ต๐ฐ๐ณ๐บ.โ
That is quite the praise by @iSandipD in his review of ๐๐ฟ๐๐ฝ๐๐ผ ๐๐ถ๐ฐ๐๐ถ๐ผ๐ป๐ฎ๐ฟ๐: ๐ฑ๐ฌ๐ฌ ๐ง๐ฎ๐๐๐ ๐ง๐ถ๐ฑ๐ฏ๐ถ๐๐ ๐ณ๐ผ๐ฟ ๐๐ต๐ฒ ๐๐๐ฟ๐ถ๐ผ๐๐ ๐๐ฟ๐๐ฝ๐๐ผ๐ด๐ฟ๐ฎ๐ฝ๐ต๐ฒ๐ฟ, by Jean-Philippe (JP) Aumasson (@veorq). Sandip is recommending the book for the Canon Hall of Fame.
๐ Read the review: https://cybercanon.org/crypto-dictionary-500-tasty-tidbits-for-the-curious-cryptographer/
๐๏ธ If interested in purchasing, please consider using this link to support the Canon: https://amzn.to/43VPQap
@nostarch #CyberscurityBooks #CyberCanonHoFCandidate #Cryptography
๐ฉโ๐ป๐๐'๐ ๐ฅ๐ฒ๐๐ถ๐ฒ๐ ๐๐ฎ๐!๐ง
This week, Kevin Magee provides a Hall of Fame recommendation:
"Sarah Armstrong-Smithโs ๐๐ฃ๐๐๐ง๐จ๐ฉ๐๐ฃ๐ ๐ฉ๐๐ ๐พ๐ฎ๐๐๐ง ๐ผ๐ฉ๐ฉ๐๐๐ ๐๐ง ๐๐๐ฃ๐๐จ๐๐ฉ is a compelling and necessary read for anyone tasked with defending digital infrastructure in a world shaped by human adversaries. Rather than focus on technical exploits or reactive controls, Sarah reframes cybersecurity through the lens of attacker motivation, what drives threat actors, how they think, and why that understanding changes everything about how we build our defenses."
Read Kevinโs detailed review of why he believes it will help you "transform your response to threats" โก๏ธ https://tinyurl.com/56nzxp5z
#CISO #SecurityAwareness #ThreatIntelligence #CyberCanonHoFCandidate
๐ ๐ง๐ผ๐ฑ๐ฎ๐ ๐ถ๐ป ๐๐๐ฏ๐ฒ๐ฟ๐๐ฒ๐ฐ๐๐ฟ๐ถ๐๐ ๐๐ถ๐๐๐ผ๐ฟ๐!
On November 2, 1988, the Morris Worm became the first major computer virus to spread across the Internet. What began as a graduate studentโs โexperimentโ quickly spiraled out of control, taking down much of the early Internet and costing millions in cleanup. It also gave rise to one of cybersecurityโs most important realizations: even well-intentioned code can cause catastrophic damage in a connected world.
To learn more, ๐๐๐ฃ๐๐ฎ ๐ฝ๐๐๐ง ๐๐ค๐๐จ ๐๐๐๐จ๐๐๐ฃ๐ by Scott Shapiro, a #CyberCanonHoFCandidate, covers the #MorrisWorm as one of its five infamous hacks. See our review โก๏ธ https://tinyurl.com/r2b3zc2u
๐ฅAnd as a bonus, many may not be aware that ๐๐๐ ๐พ๐ช๐๐ ๐ค๐ค'๐จ ๐๐๐ also contains an interesting perspective on the Morris Worm. A year after astronomer Cliff Stoll's spy tracking journey, he was one of many admins around the country who were investigating the Morris Worm live as it was spreading through the night. Cliff writes about this experience in the book's epilogue, where he discovers that the author of the worm was actually the son of NSA's Chief Scientist, Robert Morris, whom Cliff worked with in relation to his international hacker sleuthing a year earlier.
#CyberCanonHoF review โก๏ธ https://tinyurl.com/3rywf7zw
If your mission this October is to elevate awareness, not just compliance, here is a book worth putting in your teamโs hands...
๐๐ ๐๐ฉโ๐จ ๐๐ข๐๐ง๐ฉ, ๐๐ฉโ๐จ ๐๐ช๐ก๐ฃ๐๐ง๐๐๐ก๐ by @mikko became a candidate for our Hall of Fame by weaving technical insight with human stories, showing how every connected thing holds risk.
๐ https://tinyurl.com/y9ne2uzk
Why this matters during #CybersecurityAwarenessMonth:
1. In a hyperconnected world, vulnerability is the shadow companion of innovation.
2. Technology alone cannot defend. The human factor is equally critical.
3. Stories fuel understanding. A cautionary tale sticks longer than dry technical specs.
#CyberCanonHoFCandidate #SecurityCulture #CybersecurityBooks
๐๐ฅ๐ฒ๐๐ถ๐ฒ๐ ๐๐ฎ๐ ๐ง๐๐ฒ๐๐ฑ๐ฎ๐!๐
Differential Privacy is an increasingly popular, though controversial, technique for protecting confidential data by carefully introducing statistical noise. Even if you are very familiar with #DP, you likely don't know quite as much as Dr. Simson Garfinkel ( @xchatty )
This week, Ben Rothke ( @benrothke ) provides a Hall of Fame recommendation in his review of Garfinkel's new book, ๐๐ช๐ง๐ง๐ฆ๐ณ๐ฆ๐ฏ๐ต๐ช๐ข๐ญ ๐๐ณ๐ช๐ท๐ข๐ค๐บ, from The MIT Press Essential Knowledge Series. ( @themitpress )
Review๐ https://tinyurl.com/2s3jk4cn
#CybersecurityBooks #CyberCanonHoFCandidate #DifferentialPrivacy #DataPrivacy
โ๏ธ๐๐ผ๐ผ๐ธ ๐ฅ๐ฒ๐๐ถ๐ฒ๐ ๐๐ฟ๐ผ๐ฝ!โ๏ธ
This week, @dykstra provides a Hall of Fame recommendation review of ๐พ๐ฎ๐๐๐ง๐จ๐๐๐ช๐ง๐๐ฉ๐ฎ ๐๐ฃ ๐พ๐ค๐ฃ๐ฉ๐๐ญ๐ฉ: ๐๐๐๐๐ฃ๐ค๐ก๐ค๐๐ฎ, ๐๐ค๐ก๐๐๐ฎ, ๐๐ฃ๐ ๐๐๐ฌ by professors ๐งโ๐ซ Chris Hoofnagle and Golden Richard III.
Josiah writes that the textbook "fills a long-standing gap. It does not tell readers what to thinkโit teaches them how to think about cybersecurity in a connected, contested and continually evolving world. (...) equally valuable for newcomers and experienced practitioners who want to see the bigger picture. For its breadth, clarity, and critical perspective, it belongs in the CyberCanon Hall of Fame."
Full review ๐https://tinyurl.com/mv6255mk
CyberCanon