Hacker News Reader

If I want to go into site security, web malware detection and protection, is there a book or blog you can recommend to read?

Their blog is pretty good: http://blog.sucuri.net.