At Maximilan Dornseif’s blog you can find a comprehensive (though obviously subjective) list of books and papers, which are considered by him and his colleagues to be the "Top 18 Papers in Information Security". It is a great collection with lots of food for thoughts. And it is fun to see "Smashing The Stack For Fun And Profit" in the same context as Shannon’s "A Mathematical Theory of Communication".