References

Software Security

• Intel 80386 Programmer's Reference Manual, 1987 (HTML).
  Much shorter than the full current Intel Architecture manuals, but describes all processor features used in this course.
• The C Programming Language.
  C programming bible.
• Advanced Programming in Unix Environment.
  Unix programming bible, covers every bit of details.
• Linking, Loading and Libraries.
  Discuss linking and loading details at user space, the ELF, the shared objects, and also discusses processes and Windows PE.
• Smashing The Stack For Fun And Profit, Aleph One.
• Bypassing non-executable-stack during exploitation using return-to-libc by c0ntex.
• Basic Integer Overflows, blexim.
• Exploiting Format String Vulnerabilities, scut.
• w00w00 on Heap Overflows, Matt Conover.
• Heap Spraying Demystified, Peter Van Eeckhoutte.

OS Security

• Secure Programming for Linux and Unix HOWTO, David Wheeler.
• setuid demystified by Hao Chen, David Wagner, and Drew Dean.
• Some thoughts on security after ten years of qmail 1.0 by Daniel J. Bernstein.
• Reflections on Trusting Trust by Ken Thompson.

Web Security

• The Tangled Web: A Guide to Securing Modern Web Applications. Michael Zalewski.
• Browser security handbook.
• Modern Web Security. Cover latest web security technologies since 2010.
• The Security Architecture of the Chromium Browser by Adam Barth, Collin Jackson, Charles Reis, and the Google Chrome Team.
• Why Phishing Works by Rachna Dhamija, J. D. Tygar, and Marti Hearst.
• The web origin concept. Adam Barth. 2011.

Network Security

• A Look Back at Security Problems in the TCP/IP Protocol Suite, Steven M. Bellovin.
• Analysis of the SSL 3.0 protocol, David Wagner and Bruce Schneier.
• SoK: SSL and HTTPS: Revisiting past challenges and evaluating certificate trust model enhancements Jeremy Clark and Paul C. van Oorschot.

Software

• Virtual Box
• Pre-built Ubuntu (16.04 32bit)
• scapy
• WireShark