Privileged Attack Vectors

Privileged Attack Vectors
Author :
Publisher : Apress
Total Pages : 403
Release :
ISBN-10 : 9781484259146
ISBN-13 : 1484259149
Rating : 4/5 (149 Downloads)

Book Synopsis Privileged Attack Vectors by : Morey J. Haber

Download or read book Privileged Attack Vectors written by Morey J. Haber and published by Apress. This book was released on 2020-06-13 with total page 403 pages. Available in PDF, EPUB and Kindle. Book excerpt: See how privileges, insecure passwords, administrative rights, and remote access can be combined as an attack vector to breach any organization. Cyber attacks continue to increase in volume and sophistication. It is not a matter of if, but when, your organization will be breached. Threat actors target the path of least resistance: users and their privileges. In decades past, an entire enterprise might be sufficiently managed through just a handful of credentials. Today’s environmental complexity has seen an explosion of privileged credentials for many different account types such as domain and local administrators, operating systems (Windows, Unix, Linux, macOS, etc.), directory services, databases, applications, cloud instances, networking hardware, Internet of Things (IoT), social media, and so many more. When unmanaged, these privileged credentials pose a significant threat from external hackers and insider threats. We are experiencing an expanding universe of privileged accounts almost everywhere. There is no one solution or strategy to provide the protection you need against all vectors and stages of an attack. And while some new and innovative products will help protect against or detect against a privilege attack, they are not guaranteed to stop 100% of malicious activity. The volume and frequency of privilege-based attacks continues to increase and test the limits of existing security controls and solution implementations. Privileged Attack Vectors details the risks associated with poor privilege management, the techniques that threat actors leverage, and the defensive measures that organizations should adopt to protect against an incident, protect against lateral movement, and improve the ability to detect malicious activity due to the inappropriate usage of privileged credentials. This revised and expanded second edition covers new attack vectors, has updated definitions for privileged access management (PAM), new strategies for defense, tested empirical steps for a successful implementation, and includes new disciplines for least privilege endpoint management and privileged remote access. What You Will Learn Know how identities, accounts, credentials, passwords, and exploits can be leveraged to escalate privileges during an attack Implement defensive and monitoring strategies to mitigate privilege threats and risk Understand a 10-step universal privilege management implementation plan to guide you through a successful privilege access management journeyDevelop a comprehensive model for documenting risk, compliance, and reporting based on privilege session activity Who This Book Is For Security management professionals, new security professionals, and auditors looking to understand and solve privilege access management problems


Privileged Attack Vectors Related Books

Critical Infrastructure
Language: en
Pages: 338
Authors: Tyson Macaulay
Categories: Business & Economics
Type: BOOK - Published: 2008-08-27 - Publisher: CRC Press

GET EBOOK

Critical Infrastructure (CI) is fundamental to the functioning of a modern economy, and consequently, maintaining CI security is paramount. However, despite all
Managing Cybersecurity in the Process Industries
Language: en
Pages: 484
Authors: CCPS (Center for Chemical Process Safety)
Categories: Technology & Engineering
Type: BOOK - Published: 2022-04-19 - Publisher: John Wiley & Sons

GET EBOOK

The chemical process industry is a rich target for cyber attackers who are intent on causing harm. Current risk management techniques are based on the premise t
Stepping Through Cybersecurity Risk Management
Language: en
Pages: 340
Authors: Jennifer L. Bayuk
Categories: Computers
Type: BOOK - Published: 2024-03-26 - Publisher: John Wiley & Sons

GET EBOOK

Stepping Through Cybersecurity Risk Management Authoritative resource delivering the professional practice of cybersecurity from the perspective of enterprise g
A Practical Introduction to Enterprise Network and Security Management
Language: en
Pages: 446
Authors: Bongsik Shin
Categories: Computers
Type: BOOK - Published: 2021-07-20 - Publisher: CRC Press

GET EBOOK

A Practical Introduction to Enterprise Network and Security Management, Second Edition, provides a balanced understanding of introductory and advanced subjects
Standards and Standardization: Concepts, Methodologies, Tools, and Applications
Language: en
Pages: 1706
Authors: Management Association, Information Resources
Categories: Computers
Type: BOOK - Published: 2015-02-28 - Publisher: IGI Global

GET EBOOK

Effective communication requires a common language, a truth that applies to science and mathematics as much as it does to culture and conversation. Standards an