Answers.Body: <p>It's a great field to explore!</p>
  <ul>
  <li><p><a href="https://pages.cs.wisc.edu/%7Eremzi/OSTEP/" rel="nofollow noreferrer">Operating Systems, Three Easy Pieces</a> is a way to continue your exploration of OS, and is free online.</p>
  </li>
  <li><p><a href="https://rads.stackoverflow.com/amzn/click/com/047008023X" rel="nofollow noreferrer" rel="nofollow noreferrer">The Shellcoder's Handbook</a> has been recommended to me before, though it is not free.</p>
  </li>
  <li><p><a href="https://rads.stackoverflow.com/amzn/click/com/1593271441" rel="nofollow noreferrer" rel="nofollow noreferrer">Hacking: The Art of Exploitation</a> is great, and it goes into fuzzing and manual attacks nicely. I use this textbook with my students. (Note that the contents are rather out of date, but also get at difficult ideas that underlie more modern attacks)</p>
  </li>
  <li><p>Reverse Engineering for Beginners has also been recommended to me, and is free.  I have not read it myself.</p>
  </li>
  </ul>
  <p>And, of course, you should join CTFs.  There are simply hundreds of them, and there are contests you can join all year long.  PicoCTF is nominally aimed at high school, but it is a particularly good one to get started with because it starts the level quite low, and the challenges get progressively harder until they are quite advanced, even for undergrads.  You would have to identify yourself as an adult, which would make you ineligible for prizes, but the contest is otherwise free, and unlike many CTFs, it is explicitly designed to teach.</p>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2023-02-20T14:59:39.590Z
Answers.Text: CTF: https://en.wikipedia.org/wiki/Capture_the_flag_(cybersecurity)
Answers.UserDisplayName: Buffy
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2023-02-20T15:10:13.377Z
Answers.Text: Sure I will check out ctfs for sure!
Answers.UserDisplayName: Yuv
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2023-02-20T14:55:40.193Z
Answers.LastActivityDate: 2023-02-20T14:55:40.193Z
Answers.UserDisplayName: Ben I.
Body: <p>I see a lot of hype regarding cyber/network security. And also find an unending list of books and courses for the same.</p>
  <p>As I have been working on system software projects for the last couple of months, such as OSes and compilers, I want to delve deep into system security.</p>
  <p>I can find some material online like malware analysis and cryptanalysis etc. But where do I start if I want to go deeper into System Security?</p>
  <p>P.S. I am a CS Undergrad.</p>
  
Comments.ContentLicense: CC BY-SA 4.0
Comments.CreationDate: 2023-02-22T18:22:36.740Z
Comments.Text: I just wanted to comment that as far as I know, cryptanalysis (which you mentioned above) has pretty much nothing to do with system security, other than that it's sometimes possible to exploit the use of very weak ciphers (without usually needing to know much about them). So, generally speaking, I would exclude cryptanalysis from your list of topics.
Comments.UserDisplayName: yoniLavi
Tags: <security><operating-systems>
Title: System Security related study material suggestions
ThreadText: # System Security related study material suggestions
  
  (Asked by: username_0 on 2023-02-20)
  
  I see a lot of hype regarding cyber/network security. And also find an unending list of books and courses for the same.
  
  As I have been working on system software projects for the last couple of months, such as OSes and compilers, I want to delve deep into system security.
  
  I can find some material online like malware analysis and cryptanalysis etc. But where do I start if I want to go deeper into System Security?
  
  P.S. I am a CS Undergrad.
  
  **Tags:** security, operating-systems
  
  > **Comments:**
  > **username_1**: I just wanted to comment that as far as I know, cryptanalysis (which you mentioned above) has pretty much nothing to do with system security, other than that it's sometimes possible to exploit the use of very weak ciphers (without usually needing to know much about them). So, generally speaking, I would exclude cryptanalysis from your list of topics.  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_2 on 2023-02-20. Score: 3 | Accepted answer
  
  It's a great field to explore!
  
  * [Operating Systems, Three Easy Pieces](https://pages.cs.wisc.edu/%7Eremzi/OSTEP/) is a way to continue your exploration of OS, and is free online.
  * [The Shellcoder's Handbook](https://rads.stackoverflow.com/amzn/click/com/047008023X) has been recommended to me before, though it is not free.
  * [Hacking: The Art of Exploitation](https://rads.stackoverflow.com/amzn/click/com/1593271441) is great, and it goes into fuzzing and manual attacks nicely. I use this textbook with my students. (Note that the contents are rather out of date, but also get at difficult ideas that underlie more modern attacks)
  * Reverse Engineering for Beginners has also been recommended to me, and is free. I have not read it myself.
  
  And, of course, you should join CTFs. There are simply hundreds of them, and there are contests you can join all year long. PicoCTF is nominally aimed at high school, but it is a particularly good one to get started with because it starts the level quite low, and the challenges get progressively harder until they are quite advanced, even for undergrads. You would have to identify yourself as an adult, which would make you ineligible for prizes, but the contest is otherwise free, and unlike many CTFs, it is explicitly designed to teach.
  
  > **Comments:**
  > **username_3**: CTF: https://en.wikipedia.org/wiki/Capture_the_flag_(cybersecurity)  
  > **username_0**: Sure I will check out ctfs for sure!  
  
  ---
  
  