- IDA Pro and Decompilers Website
- Software Security Testing
- Introduction to Risk Analysis
- Introduction to Fuzzing
- The Art Of Software Security Assessment", by Mark Dowd, McDonald, Schuh, 2006
- *Not on the recommended list, but a useful resource
- *Not on the recommended lists, but I think SANS would be better off having students just work on these all day