Another lesser known book by him is also worth a read: "Silence on the Wire" that takes a look at the full information security stack from the keyboard you type on, to the wires the data transits, to the internet protocols, etc  and looking at how each stage exposes/protects data.
And has quite an interesting history in infosec beyond that .
His separate guide on CNC is great. He also has a great intro to electronics. His first book is an amazing survey of totally passive attacks. His second book is a comprehensive survey of web application osecurity.
Fresh book recommendations delivered straight to your inbox every Thursday.