Security models are specific mechanisms to represent security policies in a logical way. These models are based on the Trusted Computing Base (TCB), which is described in the US Department of Defense Standard 5200.28. This standard is also known as the Orange Book. It presents TCB as trusted system components that are responsible for the access control to any system. TCB is limited by an fictional boundary called a security perimeter. Every connection between the TCB and other subsystem should be possible using secure channels sometimes named security paths. Security models are present to prevent unauthorized information flow. In other words, they assert that the information is flowing from a low-level security to a high level, and not the opposite. There are also other models named noninterference models, which focus on the behaviors done on each subject and not...
Advanced Infrastructure Penetration Testing
Advanced Infrastructure Penetration Testing
Overview of this book
It has always been difficult to gain hands-on experience and a comprehensive understanding of advanced penetration testing techniques and vulnerability assessment and management. This book will be your one-stop solution to compromising complex network devices and modern operating systems. This book provides you with advanced penetration testing techniques that will help you exploit databases, web and application servers, switches or routers, Docker, VLAN, VoIP, and VPN.
With this book, you will explore exploitation abilities such as offensive PowerShell tools and techniques, CI servers, database exploitation, Active Directory delegation, kernel exploits, cron jobs, VLAN hopping, and Docker breakouts. Moving on, this book will not only walk you through managing vulnerabilities, but will also teach you how to ensure endpoint protection. Toward the end of this book, you will also discover post-exploitation tips, tools, and methodologies to help your organization build an intelligent security system.
By the end of this book, you will have mastered the skills and methodologies needed to breach infrastructures and provide complete endpoint protection for your system.
Related Content you might be interested in
Current Title:
Advanced Infrastructure Penetration Testing
Table of Contents (14 chapters)
Preface
Free Chapter
Introduction to Advanced Infrastructure Penetration Testing
Advanced Linux Exploitation
Corporate Network and Database Exploitation
Active Directory Exploitation
Docker Exploitation
Exploiting Git and Continuous Integration Servers
Metasploit and PowerShell for Post-Exploitation
VLAN Exploitation
VoIP Exploitation
Insecure VPN Exploitation
Routing and Router Vulnerabilities
Internet of Things Exploitation
Other Books You May Enjoy
Customer Reviews