"Turing has a chat" is it safe?

There's a new thing to report to you, we registered the "Turing Education" account in Himalaya today and created a voice album, "Turing has a chat ." The name is called to make a show that people feel interesting . Today, Turing has a chat album on the first stage of the program, talking about the security theme, the first time do not have enough experience, there may be some problems, hope to get the advice of small partners.

Also because just started to do, dare not expect too much. Look forward to this program can go down, in the programmer's spare time to accompany you at a moment.

Do an event for the first episode, go to the Himalaya platform to review your views on the first episode, and get a copy of the security book listed below and send out 5 copies .

3 people were chosen to send 3 copies of the commentary on the Turing Education platform, and comments and programs were available.

The following books cover: Reverse engineering + Android + IOS + Web Apps + social engineering, read these books and give you the best security guidance!

1, Korea reverse analysis leading works

Li Chengyuan
Translator: Wu Shanhai
Revision: Golden Tiger

The leading in the field of reverse analysis in Korea
The first listing is 5 consecutive weeks won the Korea it book list TOP10

"The core principles of reverse engineering" is very detailed, covering the basic knowledge from malicious code analysis to advanced technology of all content, systematic and organized, concise language, easy to understand, and in the explanation of the appropriate sample program, so that the content easier to understand. This book provides a detailed explanation of the various common techniques in recent malicious code that you can benefit from, whether you are a beginner or an analytical expert.

2, multi-processor reverse practical treasure

Bruce Dang, etc.
Translator: Single Industry

"Reverse Engineering Combat" features:
Explore unique reverse engineering methodologies, including analysis of real-world malware
Covers three of the most popular processor architectures (x86, x64, and arm)
Provides comprehensive exercises for real backdoor procedures
Explain the complex code obfuscation techniques
Explore advanced debugging techniques for automated and efficient reverse engineering processes

3. Interesting binary

Love Jia Jian er
Translator: Zhouzhiheng

How to prevent software from being analyzed by others?
How do I know what the software is doing at run time?
How can I prevent attackers from exploiting vulnerabilities to seize system privileges?
Open the black box and feel the fun of the bottom world!

"Interesting binary: Software security and reverse analysis" through reverse engineering, uncover the secrets of the machine language behind the familiar software and teach readers how to read the binary code. By understanding these methods, technicians can effectively debug and prevent malware attacks and decompile. The techniques covered in this book include: Assembly and Disassembly, debugging and anti-debugging, buffer overflow attacks and security tools such as underlying security, hooks and injections, and Metasploit.

4., Foreign Handbook Series authoritative reader of the Android article

Joshua J. Drake etc.
Translator: Jianwei Zhuge Wei Sho Zi Ai Yang Kun

Android Security first book, focusing on technical details such as device root, reverse engineering, vulnerability research, and software vulnerability utilization
Tombkeeper, Flanker, dm557, non-worm and other well-known white hats recommended
Top White hat original + Frontline security expert deduction

The Android Security and Defense Authority Guide, created by some of the world's top hackers, is the most comprehensive security manual for Android systems today. In the book, it introduces the vulnerability mining and analysis in the Android system, and gives a lot of tools to analyze the system problems from the angle of white hat, which is a rare safety guide. Mobile device managers, security researchers, Android app developers, and consultants who are responsible for evaluating Android security can find the necessary guidance and tools in this book.

5., Korea android penetration test first book

Zhao, etc.
Translator: Jin San Wu

From the environment to the analysis, covering the whole process of service system, based on the online/offline techniques to show the virtual environment penetration testing true method
OWASP China Director Ziming recommendation

The Android malicious code Analysis and penetration test details the spread of Android malicious code and describes how to address such threats for developers and users. Also from the analyst's point of view, the penetration test method is used to see how the application can be circuitous attacks to obtain sensitive information. These are diagnostic methods that can be directly applied by a security consultant or safety officer.

6., the Domestic security field original classic

Fengsengjiang

Sales of similar books in major online stores topped the ranks
The first Android security book in China

"Android software security and reverse analysis" mainly from the following aspects of Android security exploration:
The first is the disassembly of the Android program, which is part of what most developers care about, but what most people do not know;
In fact, the analysis of the Android NDK program, this part is the vast number of security enthusiasts want to master, but this information on the Internet is difficult to find;
The last is the security of the Android architecture itself, which is something that all developers and users of the Android platform should know about.

7, The Foreign Handbook series authoritative Reader's iOS article

Charlie Miller, etc.
Translator: Fours Also

Covers all of the discovered iOS vulnerabilities and what they can do to the iOS system, explains how iOS works, System architecture, system risks, and shows people the other side of iOS and wants to avoid the dangers of iOS vulnerabilities. The book also provides some ideas for making the device inherently safer or more secure for users to use.

8, the Foreign Handbook series authoritative Reader's Web Chapter

Marcus Pinto, etc.
Fu Zhihong: Yao Hua Yiu

Hacker attack Technology Treasure: Web Combat (2nd Edition) is a practical guide to explore and study Web application security vulnerabilities. The authors use a large number of real-world cases and sample code to detail the weaknesses of various web applications and to drill down into specific penetration testing for Web applications.

9. The authoritative reader of Web application security in Japan

The Pill Hao
Translator: Wen Zhao Liu Bin

Japan Amazon full 5 star selling long sale book
Japan Web application Security first man's masterpiece
Owasp, head of Beijing district, Chen Liang's recommendation for preface

The eight chapters of the authoritative Guide to Web application security comprehensively analyze the Web security knowledge that Web developers such as SQL injection, XSS, and csrf must know. By attacking PHP samples on VMware player virtual machines, the principles and methods of security vulnerabilities are described in detail to help you create a secure Web application.

10. Kali Linux penetration Test reader

Zhao, etc.
Translator: Golden Love

A perfect guide to penetration testing business processes
From environment settings to applications, covering the entire process of penetration testing
To show the new trends of different tools based on practical experience

"Kali Linux & Backtrack Penetration testing" is easy for backtrack users and subsequent versions of Kali Linux users to perform practical exercises. According to the author's experience, even if the subsequent version of Kali Linux is released, it is a good choice as long as the drive compatibility and tools provided by backtrack are well utilized. Two live CDs are also mixed in the book for diagnostics.

Joseph Muniz Aamir Lakhani
Translator: Han father

Kali Linux is a professional penetration testing and security audit tool and is the successor of the world's most popular open source Penetration toolkit backtrack. This book will teach readers how to think like real attackers and understand how they use systems and uncover vulnerabilities.

Web Penetration testing: Using Kali Linux not only tells us how to test and secure Web applications, but also stands on the attackers ' point of view, demonstrating how attackers can compromise the system. Author Aamir Lakhani is a world-renowned cyber security expert who has been at the forefront of cyber security. A good book not to be missed by a beginner or an experienced person.
--Amazon reader review

11. Social engineering

Christopher Hadnagy
Translator: Lu Daohong Azalea Chui

No matter how indestructible your security device is, how effective the defensive process is, the weakest and most intrusive part of the security system is human. Professional and malicious social engineers seem to be unable to withstand, they will use the weakness of human nature to overcome the seemingly strict protection system. The book details all aspects of social engineering from an attacker's perspective, including inducement, camouflage, psychological impact, and interpersonal manipulation, and is illustrated by the true stories and cases of social engineering gurus such as Kevin Mittnick. The content includes deceptive practices used by hackers, spies, and scammers, as well as key steps to prevent social engineering threats.

Christopher Hadnagy
Translator: Cai Yun Bamboo

"This book is a combination of my years of work in people and interpersonal interaction, the experience and insights of former US Secret Service expert Paul Kelly in the field of security, and Chirstopher's profound knowledge in the field of social engineering. Our portfolio is inspiring and unique, and we hope you will benefit from it. --Dr. Paul Ekman, honorary professor of psychology at the University of California, San Francisco, president of Paul Ekman Group

Go to Himalaya comment send out 5 copies
Message Comments Sent 3 copies
Ends 29th 10:00

Listen and read, may Turing education always be in the corner of your heart.
Turing has a chat, a lot of dry goods.
"Read the original" to listen to "Himalaya Turing".

"Turing has a chat" is it safe?