[ Home ] [ Topics ] [ Assignments ] [ Bibliography ] [ Short Stories ] [ Browser JDK ] [ Useful Tools ] [ False Positives ] [ Microsoft Equation ] [ Course Slides ]

The following is a list of potentially useful books and web sites related to Security and Cryptography.  It is not intended to be in any way a complete or exhaustive list.

Books

• Bishop, David, Introduction to Cryptography with Java Applets, published by Jones and Bartlett.
• Bishop, Matt, Computer Security: Art and Science, published by Addison-Wesley
• Ferguson, Niels; Schneier, Bruce, Practical Cryptography, published by Wiley
• Gaines, Helen, Cryptanalysis, published by Dover
• Gardner, Martin, Codes, Ciphers and Secret Writing, published by Dover
• Garfinkel, Simson, Web Security, Privacy & Commerce, published by O'Reilly & Associates
• Gong, Li, Inside Java 2 Platform Security: Architecture, API Design, and Implementation, published by Addison-Wesley
• Kahn, David, The Codebreakers: The Story of Secret Writing, published by Scribner
• Kaufman, Charlie; Perlman, Radia; Speciner, Mike, Network Security: Private Communications in a Public World, Second Edition, published by Prentice-Hall
• Levy, Steven, Crypto: How the Code Rebels Beat the Government Saving Privacy in the Digital Age, published by Penguin Putnam
• Levy, Steven, Hackers: Heroes of the Computer Revolution, published by Penguin
• Menezes, Alfred J; Van Oorschot, Paul C; Vanstone, Scott A, Handbook of Applied Cryptography, published by CRC Press.  (Freely downloadable copy available at http://www.cacr.math.uwaterloo.ca/hac/ )
• Mitnick, Kevin D.; Simon, William L., The Art of Deception : Controlling the Human Element of Security, published by Wiley
• Schneier, Bruce, Applied Cryptography: Protocols, Algorithms, and Source Code in C, published by Wiley
• Schneier, Bruce, Secrets and Lies: Digital Security in a Networked World, published by Wiley
• Singh, Simon, The Code Book: The Science of Secrecy from Ancient Egypt to Quantum Cryptography, published by Anchor
• Skoudis, Ed, Counter Hack: A Step-by-Step Guide to Computer Attacks and Effective Defenses, Prentice-Hall PTR
• Skoudis, Ed, Malware: Fighting Malicious Code, published by Prentice-Hall PTR
• Stallings, William, Cryptography and Network Security: Principles and Practices, published by Prentice-Hall
• Stallings, William, Network Security Essentials: Applications and Standards, Second Edition, published by Prentice-Hall.
• Stevenson, William, A Man Called Intrepid, published by The Lyons Press
• Stoll, Clifford, The Cuckoo's Egg: Tracking a Spy Through the Maze of Computer Espionage, published by Pocket Books
• Winterbotham, F. W., The Ultra Secret, published by Bantam Doubleday Dell.

Web Sites

The following web sites are in no particular order.

• Handbook of Applied Cryptography: http://www.cacr.math.uwaterloo.ca/hac/
• CyberCrime: http://www.cybercrime.gov/
• CERT Coordination Center: http://www.cert.org/
• Decoding Nazi Secrets (Enigma): http://www.pbs.org/wgbh/nova/decoding/
• Happy Hacker: http://www.happyhacker.org/
• Insecure.org: http://www.insecure.org/
• Classical Cryptography Course by Lanaki: http://www.fortunecity.com/skyscraper/coding/379/lesson1.htm
• A Mathematical Theory of Communication by Claude E. Shannon: http://cm.bell-labs.com/cm/ms/what/shannonday/paper.html
• Communication Theory of Secrecy Systems by Claude E. Shannon: http://www3.edgenet.net/dcowley/docs.html
• Claude Shannon: Collected Papers: http://www.research.att.com/~njas/doc/shannon.html
• Nessus: http://www.nessus.org/index.html
• NIST Computer Security Division: http://csrc.nist.gov/
• OWASP: http://www.owasp.org/index
• The Risks Digest: http://catless.ncl.ac.uk/Risks
• Bruce Schneier's Self-Study Course in Block Cipher Cryptanalysis: http://www.schneier.com/paper-self-study.html
• Phrack: http://www.phrack.org/
• International Association for Cryptologic Research: http://www.iacr.org/
• Cryptome: http://cryptome.org/
• AES Home Page: http://csrc.nist.gov/CryptoToolkit/aes/
• NESSIE: https://www.cosic.esat.kuleuven.ac.be/nessie/
• List of crypto and security courses: http://avirubin.com/courses.html
• Crypto++ Library: http://www.eskimo.com/~weidai/cryptlib.html
• The Voynich Manuscript: http://www.crystalinks.com/voynich.html , http://math.ucr.edu/home/baez/voynich.html , http://web.bham.ac.uk/G.Landini/evmt/evmt.htm , http://www.voynich.nu/
• Rosetta Stone: http://www.ba.dlr.de/ne/pe/virtis/stone1.htm
• American Cryptogram Association: http://www.und.nodak.edu/org/crypto/crypto/.summary.html
• Army Field Manual: http://www.und.nodak.edu/org/crypto/crypto/army.field.manual/
  (Table of contents: http://www.wisdom.weizmann.ac.il/~albi/cryptanalysis/TOC.ps )
• Cryptologia: http://www.dean.usma.edu/math/pubs/cryptologia/
• Word Frequency and Letter Frequency in the English Language: http://deafandblind.com/word_frequency.htm

There are lots and lots of other web sites relating to Security!