Best Foundations books

The Pragmatic Programmer

Your Journey to Mastery

Thomas and Hunt's career-defining set of practical heuristics for writing software professionally — orthogonality, broken-windows, DRY, tracer bullets, and the underlying argument that craftsmanship is a posture, not a process.

Silence on the Wire

A Field Guide to Passive Reconnaissance and Indirect Attacks

Michal Zalewski's classic on the indirect attack surface: timing channels, protocol-stack fingerprinting, and the often-overlooked side data leaked by every layer of a stack.

Maîtriser la cryptographie d'aujourd'hui et de demain

Des bases mathématiques aux standards post-quantiques

A cryptography engineer specializing in information-system security mechanisms, who also teaches the subject, builds from cryptography's mathematical foundations up to today's post-quantum standards.

La norme ISO/IEC 27005

Maîtriser la gestion des risques en sécurité de l'information

A three-part guide to the ISO/IEC 27005:2022 standard, running from information-security governance foundations to the detail of every risk-management process, with fictional case studies to practice against.

Linux Basics for Hackers

Getting Started with Networking, Scripting, and Security in Kali

OccupyTheWeb's introduction to Linux from the angle that hackers and pentesters actually need it: shells, networking, scripting, and Kali tooling.

Fancy Bear Goes Phishing

The Dark History of the Information Age, in Five Extraordinary Hacks

Five famous hacks used as a way into the deeper question of why software is insecure at all, written by a Yale law professor who learned to code to write it. More a history and theory of vulnerability than a how-to.

Cyberattaques

Les dessous d'une menace mondiale

A clear, journalistic decoding of the cyberattack ecosystem — ransomware gangs, state actors, and the economics and geopolitics behind the headlines — by one of France's best-known cyber experts.

Cybersécurité

Analyser les risques, mettre en œuvre les solutions

Solange Ghernaouti's broad academic survey of cybersecurity — risk analysis, governance, technical and legal dimensions — the standard French university reference, now in its 7th edition.

Sécurité informatique - Ethical Hacking

Apprendre l'attaque pour mieux se défendre

The French-language reference for offensive security: a thick, lab-heavy tour of the attacker's toolkit, maintained across editions by the ACISSI collective under the motto “learn the attack to better defend.”

How Cybersecurity Really Works

A Hands-On Guide for Total Beginners

Sam Grubb's gentle, exercise-driven introduction for non-specialists who need a working mental model of attacker behaviour and basic defence.

Alice and Bob Learn Application Security

Tanya Janca's hands-on AppSec primer covering threat modeling, secure design, secure coding, testing, deployment, and the social side of running an AppSec program — through a friendly, narrative-driven structure.

Practical Vulnerability Management

A Strategic Approach to Managing Cyber Risk

A working security engineer's guide to building a vulnerability management program from open-source tools on a real budget, covering scanning, prioritization, automation, and reporting end to end.

Foundations of Information Security

A Straightforward Introduction

Jason Andress' compact tour of the field: confidentiality / integrity / availability, identification and authentication, network and OS controls, written for newcomers and adjacent disciplines.

Click Here to Kill Everybody

Security and Survival in a Hyper-Connected World

Bruce Schneier's policy-level argument that as everything becomes a computer (cars, medical devices, infrastructure, voting), the security failures that used to merely cost us money will start costing lives — and the regulatory shape of that future is being decided now.

Social Engineering

The Science of Human Hacking

Christopher Hadnagy's broad procedural reference on social engineering as a discipline — recon, pretexting, elicitation, microexpressions, and the structured engagement model his consultancy operationalized.

La face cachée d'internet

Hackers, dark net, Tor, Anonymous, WikiLeaks, Bitcoin

A lively, expert tour of the Internet's hidden layers — hackers, the dark web, Tor, Anonymous, WikiLeaks, Bitcoin — that demystifies the jargon without dumbing it down.

Sécurité informatique

Cours et exercices corrigés

A rigorous academic course on the foundations of security — cryptography, authentication, access control — with corrected exercises, from a team of well-known French and Swiss cryptographers.

Sécurité informatique

Principes et méthodes à l'usage des DSI, RSSI et administrateurs

A principles-first treatment of information security for DSI, RSSI and sysadmins — architecture, cryptography, network defence and security policy — from two veteran French practitioners.

Understanding Cryptography

A Textbook for Students and Practitioners

A genuinely teachable intro to modern cryptography that derives the math instead of hand-waving it, covering symmetric and public-key primitives without drowning you in proofs.

Les virus informatiques

Théorie, pratique et applications

The reference French academic treatment of computer virology — the theory, algorithms and practice of viruses and malicious code — by Éric Filiol, a former military cryptanalyst and one of France's leading virologists.

Reversing

Secrets of Reverse Engineering

The book that taught a generation how software actually looks once you strip away the source. Still the clearest on-ramp to thinking in assembly, even with dated tools.

The Art of Deception

Controlling the Human Element of Security

Kevin Mitnick and William Simon's case-study collection of social-engineering attacks: PBX scams, helpdesk impersonation, dumpster-diving, the casual lies that sound true. The technology dates the book; the human side is timeless.

La science du secret

A lucid popular-science history of cryptography by Jacques Stern, one of France's most eminent cryptographers — from classical ciphers to public-key and the science of secrecy.

Cybercriminalité

Comprendre, prévenir, réagir

Solange Ghernaouti's structured treatment of cybercrime — how it works, how to prevent it, how to respond — spanning technical, legal and organisational angles.

Exercices et problèmes de cryptographie

A rigorous problem book for learning cryptography — over 150 corrected exercises with course summaries, for L3/master/engineering students — by a French academic cryptographer.

La cybersécurité

Que sais-je ?

A pocket-sized primer on cybersecurity as a societal and geopolitical issue — threats, actors, stakes and policy — in the classic French “Que sais-je ?” format.