[blog.rayfoo] Infosec, DFIR, tech geekery, thoughts and whatnot

7Nov/100

Reverse Engineering Code with IDA Pro

Next book for reading:  Reverse Engineering Code with IDA Pro.  Hope this book helps get me up to speed on using IDA Pro along with some RE concepts!

[Google Books] [Syngress] [Amazon]

7Nov/100

Visualizing Data (using Processing)

Visualizing Data, by Ben Fry (O'Reilly)
[Amazon] [Google Books] [O'Reilly] [Google Search]

One of my interests has always been in data visualization (makes data more understandable, and is one step towards easier interaction with it). Chanced upon this book at the library today, certainly one thing I'd like to look into in more detail at a later point in time.

Why this book caught my interest was the fact that there was another book on such a topic in itself. Other than Applied Security Visualization by Raffael Marty, I've yet to chance upon anything else.

A quick browse of the book showed that it's very possible to use Processing (yet another good reason to take up this book: simple programming!) to implement many of the data visualization concepts. Though many people would say that this is "raw" and "slow" as compared to having a tool to do this simply and quickly, I'd say that doing it this way would certainly give the user a great understanding of the data visualization process itself. Furthermore, who's to say that Processing's not the tool itself! :P Also, the author has helpfully made the source code examples available online at his blog too.

Will keep this book in mind to look at later. Have other books to go through first... :}

6Nov/090

Up and Coming: Detecting Malice

Detecting Malice

Detecting Malice

Next book to read: RSnake's Detecting Malice e-book.

Every day hackers are stealing millions from websites and this is the book that will help you detect it happening on yours. Detecting Malice was written to help website administrators, developers, operations personelle and security product managers in building and maintaining a higher security posture. Understanding user intent is the cornerstone for reducing fraud ratios in modern web applications. From retail to government, this book covers many different realms of fraud and how to detect it at many different technical layers. From DNS and TCP to embedded content and browser fingerprinting techniques it is possible to identify users who are most likely to become dangerous often before it actually happens. A plethora of tools and techniques are all available to you within the 300+ pages of this book.

Available for only USD$39.95, and free future updates for this book too ;)