I'm taking a course right now in operating systems, a big section of which is on security. All of our required readings for this section have come from metasploit/phrack/insecure.