// reading
Bookshelf
Books that shaped my thinking on security, leadership, and the nature of adversaries.
The Art of Intrusion
Kevin Mitnick
"A masterclass in social engineering and physical penetration. Essential reading to understand the human element that technology can't patch."
Hacking: The Art of Exploitation
Jon Erickson
"This book rewired how I think about systems. If you want to understand exploitation at the bit level, there's nothing better."
The Phoenix Project
Gene Kim, Kevin Behr, George Spafford
"A novel disguised as a DevOps lesson. The constraints and bottlenecks described mirror what I see in security teams. Required reading for sec leaders."
Sandworm
Andy Greenberg
"The most gripping account of nation-state cyber operations I've read. Sandworm's NotPetya campaign is a case study in cascading infrastructure failure."
Zero Trust Networks
Evan Gilman, Doug Barth
"The foundational text on zero trust. Dense but worth every page. I reference this constantly when architecting modern security programs."
The Threat Intelligence Handbook
CrowdStrike
"Solid operational framework for building and scaling threat intelligence programs. Practical and grounded in real-world program maturity."
Cyber War
Richard Clarke, Robert Knake
"Slightly dated but essential for understanding the geopolitical dimension of cyber conflict. The policy prescriptions are still being debated today."
The Cuckoo's Egg
Cliff Stoll
"The OG cyber thriller. Stoll's 75 cent accounting error led to one of the first documented nation-state hacking cases. Timeless."