دانلود کتاب Privileged Attack Vectors: Building Effective Cyber-Defense Strategies to Protect Organizations
by Morey J. Haber, Brad Hibbert
|
عنوان فارسی: مزایای بردارهای حمله: ایجاد راهکارهای موثر دفاع سایبری برای حفاظت از سازمانها |
دانلود کتاب
جزییات کتاب
In decades past, an entire enterprise might be sufficiently managed through just a handful of credentials. Today’s environmental complexity means privileged credentials are needed for a multitude of different account types (from domain admin and sysadmin to workstations with admin rights), operating systems (Windows, Unix, Linux, etc.), directory services, databases, applications, cloud instances, networking hardware, Internet of Things (IoT), social media, and more. When unmanaged, these privileged credentials pose a significant threat from external hackers and insider threats.
There is no one silver bullet to provide the protection you need against all vectors and stages of an attack. And while some new and innovative solutions will help protect against or detect the initial infection, they are not guaranteed to stop 100% of malicious activity. The volume and frequency of privilege-based attacks continues to increase and test the limits of existing security controls and solution implementations.
Privileged Attack Vectors details the risks associated with poor privilege management, the techniques that hackers and insiders leverage, and the defensive measures that organizations must adopt to protect against a breach, protect against lateral movement, and improve the ability to detect hacker activity or insider threats in order to mitigate the impact.
What You’ll Learn
Know how identities, credentials, passwords, and exploits can be leveraged to escalate privileges during an attackImplement defensive and auditing strategies to mitigate the threats and riskUnderstand a 12-step privileged access management Implementation planConsider deployment and scope, including risk, auditing, regulations, and oversight solutionsWho This Book Is For
Security management professionals, new security professionals, and auditors looking to understand and solve privileged escalation threats