The Tangled Web: A Guide to Securing Modern Web Applications
Michal Zalewski
Silence on the Wire: A Field Guide to Passive Reconnaissance ...