Book Image

Cybersecurity – Attack and Defense Strategies - Second Edition

By : Yuri Diogenes, Dr. Erdal Ozkaya
Book Image

Cybersecurity – Attack and Defense Strategies - Second Edition

By: Yuri Diogenes, Dr. Erdal Ozkaya

Overview of this book

Cybersecurity – Attack and Defense Strategies, Second Edition is a completely revised new edition of the bestselling book, covering the very latest security threats and defense mechanisms including a detailed overview of Cloud Security Posture Management (CSPM) and an assessment of the current threat landscape, with additional focus on new IoT threats and cryptomining. Cybersecurity starts with the basics that organizations need to know to maintain a secure posture against outside threat and design a robust cybersecurity program. It takes you into the mindset of a Threat Actor to help you better understand the motivation and the steps of performing an actual attack – the Cybersecurity kill chain. You will gain hands-on experience in implementing cybersecurity using new techniques in reconnaissance and chasing a user’s identity that will enable you to discover how a system is compromised, and identify and then exploit the vulnerabilities in your own system. This book also focuses on defense strategies to enhance the security of a system. You will also discover in-depth tools, including Azure Sentinel, to ensure there are security controls in each network layer, and how to carry out the recovery process of a compromised system.

Related Content you might be interested in

Current Title:

Small book image
Cybersecurity – Attack and Defense Strategies - Second Edition
Yuri Diogenes | Dr. Erdal Ozkaya
Dec, 2019 | 634 pages
Small book image
Incident Response in the Age of Cloud
Erdal Ozkaya
Feb, 2021 | 622 pages
Small book image
Hands-On Cybersecurity for Finance
Erdal Ozkaya | Milad Aslaner
Jan, 2019 | 308 pages
Small book image
Learn Social Engineering
Erdal Ozkaya
Apr, 2018 | 566 pages
Table of Contents (20 chapters)
Preface
Preface
Who this book is for
What this book covers
To get the most out of this book
Get in touch
Free Chapter
1
Security Posture
Security Posture
The current threat landscape
The credentials – authentication and authorization
Apps
Cybersecurity challenges
Enhancing your security posture
The Red and Blue Teams
Summary
References
2
Incident Response Process
Incident Response Process
The incident response process
Handling an incident
Post-incident activity
Incident response in the cloud
Summary
References
3
What is a Cyber Strategy?
Introduction
Why do we need to build a cyber strategy?
How to build a cyber strategy
Best cyber attack strategies (Red Team)
Best cyber defense strategies (Blue Team)
Summary
Further reading
4
Understanding the Cybersecurity Kill Chain
Understanding the Cybersecurity Kill Chain
Introducing the Cyber Kill Chain
Reconnaissance
Weaponization
Privilege Escalation
Exfiltration
Threat Life Cycle Management
Tools used in the Cyber Kill Chain Phases
Cybersecurity Kill Chain Summary
Lab – Hacking Wireless Network/s via Evil Twin Attack
Lab Summary
References
Further reading
5
Reconnaissance
Reconnaissance
External reconnaissance
Web Browser Enumeration Tools
Internal reconnaissance
Summary
LAB
References
6
Compromising the System
Compromising the System
Analyzing current trends
Phishing
Exploiting a vulnerability
Zero-day
Performing the steps to compromise a system
Mobile phone (iOS / Android attacks)
Lab
Lab 2: Hack those websites (legally!)
Summary
References
Further reading
7
Chasing a User's Identity
Chasing a User's Identity
Identity is the new perimeter
Strategies for compromising a user's identity
Summary
References
8
Lateral Movement
Lateral Movement
Infiltration
Network mapping
Avoiding alerts
Performing lateral movement
Lab
Summary
References
Further reading
9
Privilege Escalation
Privilege Escalation
Infiltration
Avoiding alerts
Performing Privilege Escalation
Hands-on example of Privilege Escalation on a Windows target
Privilege escalation techniques
Windows Boot Sequence
Conclusion and lessons learned
Summary
Lab 1
Lab 2
Lab 3: HackTheBox
References
10
Security Policy
Security Policy
Reviewing your security policy
Educating the end user
Policy enforcement
Monitoring for compliance
Continuously driving security posture enhancement via security policy
Summary
References
11
Network Segmentation
Network Segmentation
The defense in depth approach
Physical network segmentation
Securing remote access to the network
Virtual network segmentation
Zero trust network
Hybrid cloud network security
Summary
Ref
12
Active Sensors
Active Sensors
Detection capabilities
Intrusion detection systems
Intrusion prevention system
Behavior analytics on-premises
Behavior analytics in a hybrid cloud
Summary
References
13
Threat Intelligence
Threat Intelligence
Introduction to threat intelligence
Open source tools for threat intelligence
Microsoft threat intelligence
Leveraging threat intelligence to investigate suspicious activity
Summary
References
14
Investigating an Incident
Investigating an Incident
Scoping the issue
Investigating a compromised system on-premises
Investigating a compromised system in a hybrid cloud
Proactive investigation (threat hunting)
Lessons learned
Summary
References
15
Recovery Process
Recovery Process
Disaster recovery plan
Contingency planning
Live recovery
Best practices for recovery planning
Disaster recovery best practices
Summary
Resources for DR Planning
References
Further reading
16
Vulnerability Management
Vulnerability Management
Creating a vulnerability management strategy
Vulnerability management tools
Implementation of vulnerability management
Best practices for vulnerability management
Vulnerability management tools
Implementing vulnerability management with Nessus
LABS
Summary
References
17
Log Analysis
Log Analysis
Data correlation
Operating system logs
Firewall logs
Web server logs
Amazon Web Services (AWS) logs
Azure Activity logs
Summary
References
18
Other Books You May Enjoy
Other Books You May Enjoy
19
Index
Index

Get in touch

Feedback from our readers is always welcome.

General feedback: If you have questions about any aspect of this book, mention the book title in the subject of your message and email us at [email protected].

Errata: Although we have taken every care to ensure the accuracy of our content, mistakes do happen. If you have found a mistake in this book we would be grateful if you would report this to us. Please visit, http://www.packt.com/submit-errata, selecting your book, clicking on the Errata Submission Form link, and entering the details.

Piracy: If you come across any illegal copies of our works in any form on the Internet, we would be grateful if you would provide us with the location address or website name. Please contact us at [email protected] with a link to the material.

If you are interested in becoming an author: If there is a topic that you have expertise in and you are interested in either writing or contributing to a book, please visit http://authors.packtpub.com.

Reviews

Please leave a review. Once you have read and used this book, why not leave a review on the site that you purchased it from? Potential readers can then see and use your unbiased opinion to make purchase decisions, we at Packt can understand what you think about our products, and our authors can see your feedback on their book. Thank you!

For more information about Packt, please visit packt.com.

Previous Section
Next Chapter