Privileged Attack Vectors: Building Effective Cyber-Defense Strategies to Protect Organizations

Author:   Morey J. Haber ,  Brad Hibbert
Publisher:   APress
Edition:   1st ed.
ISBN:  

9781484230473


Pages:   247
Publication Date:   09 December 2017
Replaced By:   9781484259139
Format:   Paperback
Availability:   In Print   Availability explained
This item will be ordered in for you from one of our suppliers. Upon receipt, we will promptly dispatch it out to you. For in store availability, please contact us.

Our Price $59.95 Quantity:  
Add to Cart

Share |

Privileged Attack Vectors: Building Effective Cyber-Defense Strategies to Protect Organizations


Add your own review!

Overview

See how privileges, passwords, vulnerabilities, and exploits can be combined as an attack vector and breach any organization. Cyber attacks continue to increase in volume and sophistication. It is not a matter of if, but when, your organization will be breached. Attackers target the perimeter network, but, in recent years, have refocused their efforts on the path of least resistance: users and their privileges. In decades past, an entire enterprise might be sufficiently managed through just a handful of credentials. Today's environmental complexity means privileged credentials are needed for a multitude of different account types (from domain admin and sysadmin to workstations with admin rights), operating systems (Windows, Unix, Linux, etc.), directory services, databases, applications, cloud instances, networking hardware, Internet of Things (IoT), social media, and more. When unmanaged, these privileged credentials pose a significant threat from external hackers and insider threats.There is no one silver bullet to provide the protection you need against all vectors and stages of an attack. And while some new and innovative solutions will help protect against or detect the initial infection, they are not guaranteed to stop 100% of malicious activity. The volume and frequency of privilege-based attacks continues to increase and test the limits of existing security controls and solution implementations. Privileged Attack Vectors details the risks associated with poor privilege management, the techniques that hackers and insiders leverage, and the defensive measures that organizations must adopt to protect against a breach, protect against lateral movement, and improve the ability to detect hacker activity or insider threats in order to mitigate the impact. What You'll Learn Know how identities, credentials, passwords, and exploits can be leveraged to escalate privileges during an attack Implement defensive and auditing strategies to mitigate the threats and risk Understand a 12-step privileged access management Implementation plan Consider deployment and scope, including risk, auditing, regulations, and oversight solutions Who This Book Is For Security management professionals, new security professionals, and auditors looking to understand and solve privileged escalation threats

Full Product Details

Author:   Morey J. Haber ,  Brad Hibbert
Publisher:   APress
Imprint:   APress
Edition:   1st ed.
Weight:   4.277kg
ISBN:  

9781484230473


ISBN 10:   1484230477
Pages:   247
Publication Date:   09 December 2017
Audience:   Professional and scholarly ,  Professional & Vocational
Replaced By:   9781484259139
Format:   Paperback
Publisher's Status:   Active
Availability:   In Print   Availability explained
This item will be ordered in for you from one of our suppliers. Upon receipt, we will promptly dispatch it out to you. For in store availability, please contact us.

Table of Contents

Chapter 1: Privileges.- Chapter 2: Shared Credentials.- Chapter 3: Password Hacking.- Chapter 4: Privilege Escalation.- Chapter 5: Insider Threats.- Chapter 6: Insider Threats.- Chapter 7: Threat Hunting.- Chapter 8: Data Centric Audit and Protection .- Chapter 9: Privileged Monitoring.- Chapter 10: Privilege Access Management.- Chapter 11: PAM Architecture.- Chapter 12: Break Glass.- Chapter 13: Industrial Control Systems (ICS).- Chapter 14: Internet of Things (IoT).- Chapter 15: The Cloud.- Chapter 16: Mobile Devices.- Chapter 17: Ransomware.- Chapter 18: Secured DevOps (SDevOps).- Chapter 19: Regulatory Compliance.- Chapter 20: Sample PAM Use Cases.- Chapter 21: Deployment Considerations.- Chapter 22: Privileged Account Management Implementation.- Chapter 23: Key Takeaways.- Chapter 24: Conclusion.-

Reviews

Author Information

Morey Haber has 20+ years of IT industry experience. He joined BeyondTrust in 2012 as a part of the eEye Digital Security acquisition and overseas strategy for both vulnerability and privileged access management. In 2004, Morey joined eEye as the Director of Security Engineering and was responsible for strategic business discussions and vulnerability management architectures in Fortune 500 clients. Prior to eEye, he was a Development Manager for Computer Associates, Inc. (CA), responsible for new product beta cycles and key customer accounts. Morey began his career as a Reliability and Maintainability Engineer for a government contractor building flight and training simulators. Brad Hibbert has 20+ years of experience in product strategy and management. He leads BeyondTrust's solution strategy and development. He joined BeyondTrust via the company's acquisition of eEye Digital Security, where Brad led strategy and products. Under Brad's leadership, eEye launched several market firsts, including vulnerability management solutions for cloud, mobile, and virtualization technologies. Prior to eEye, Brad served as Vice President of Strategy and Products at NetPro before its acquisition in 2008 by Quest Software. Over the years Brad has attained many industry certifications to support his management, consulting, and development activities. Brad has his Bachelor of Commerce, specialization in Management Information Systems, and MBA from the University of Ottawa.

Tab Content 6

Author Website:  

Customer Reviews

Recent Reviews

No review item found!

Add your own review!

Countries Available

All regions
Latest Reading Guide

Aorrng

Shopping Cart
Your cart is empty
Shopping cart
Mailing List