Social Engineering: The Science of Human Hacking
Christopher Hadnagy
Solving Identity Management in Modern Applications
Yvonne Wilson & Abhishek Hingnikar
The Tangled Web
Michal Zalewski
Threat Modeling
Adam Shostack
Tribe of Hackers
Marcus J. Carey & Jennifer Jin
Tribe of Hackers: Red Team
Waging Cyber War
Jacob G. Oakley
We Have Root
Bruce Schneier
The Web Application Hacker's Handbook
Dafydd Stuttard & Marcus Pinto
Web Application Security
Andrew Hoffman
Web Security for Developers: Real Threats, Practical Defense
Malcolm McDonald
Wireshark for Security Professionals
Jessey Bullock & Jeff T. Parker