Zum Hauptinhalt springen Zur Suche springen Zur Hauptnavigation springen
Beschreibung
In-depth counterintelligence tactics to fight cyber-espionage

"A comprehensive and unparalleled overview of the topic by experts in the field."--Slashdot

Expose, pursue, and prosecute the perpetrators of advanced persistent threats (APTs) using the tested security techniques and real-world case studies featured in this one-of-a-kind guide. Reverse Deception: Organized Cyber Threat Counter-Exploitation shows how to assess your network's vulnerabilities, zero in on targets, and effectively block intruders. Discover how to set up digital traps, misdirect and divert attackers, configure honeypots, mitigate encrypted crimeware, and identify malicious software groups. The expert authors provide full coverage of legal and ethical issues, operational vetting, and security team management.
Establish the goals and scope of your reverse deception campaign
Identify, analyze, and block APTs
Engage and catch nefarious individuals and their organizations
Assemble cyber-profiles, incident analyses, and intelligence reports
Uncover, eliminate, and autopsy crimeware, trojans, and botnets
Work with intrusion detection, anti-virus, and digital forensics tools
Employ stealth honeynet, honeypot, and sandbox technologies
Communicate and collaborate with legal teams and law enforcement
In-depth counterintelligence tactics to fight cyber-espionage

"A comprehensive and unparalleled overview of the topic by experts in the field."--Slashdot

Expose, pursue, and prosecute the perpetrators of advanced persistent threats (APTs) using the tested security techniques and real-world case studies featured in this one-of-a-kind guide. Reverse Deception: Organized Cyber Threat Counter-Exploitation shows how to assess your network's vulnerabilities, zero in on targets, and effectively block intruders. Discover how to set up digital traps, misdirect and divert attackers, configure honeypots, mitigate encrypted crimeware, and identify malicious software groups. The expert authors provide full coverage of legal and ethical issues, operational vetting, and security team management.
Establish the goals and scope of your reverse deception campaign
Identify, analyze, and block APTs
Engage and catch nefarious individuals and their organizations
Assemble cyber-profiles, incident analyses, and intelligence reports
Uncover, eliminate, and autopsy crimeware, trojans, and botnets
Work with intrusion detection, anti-virus, and digital forensics tools
Employ stealth honeynet, honeypot, and sandbox technologies
Communicate and collaborate with legal teams and law enforcement
Über den Autor
Sean M. Bodmer CISSP® CEH® Sean M. Bodmer is Director of Federal and Military Programs at Savid Corporation, Inc. Sean is an active Honeynet researcher specializing in the analysis of signatures, patterns, and behaviors of malware and attackers. Most notably he has spent several years leading the operations and analysis of advanced intrusion detection systems (honeynets) where the motives and intent of attackers and their tools can be captured and analyzed in order to generate actionable intelligence to further protect customer networks. Sean has worked in various Systems Security Engineering roles for various federal government entities and private corporations over the past decade in the Washington D.C. Metro area. Sean has lectured across the United States at industry conferences such as DEFCON, PhreakNIC, DC3, NW3C, Carnegie Mellon CERT, and the Pentagon Security Forum all covering the aspects of attack and attacker assessment profiling in order to identify the true motivations and intent behind cyber attacks.
Zusammenfassung

Reverse Deception: Organized Cyber Threat Counter-Exploitation explains how to identify advanced persistent threats (APTs), categorize them according to risk level, and prioritize your actions accordingly by applying expert, field-tested private- and government-sector methods (NSA, FBI, and DOD).

APTs cannot be seen, spread invisibly, and then continue to live in an enterprise network, undetected. In this one-of-a-kind book, the authors explain how to get-and stay-ahead of today's well-organized and extremely persistent brand of network enemies. The book describes the characteristics of malware and botnets, how they can morph, evade detection, and spin off decoys that live in-network, while appearing to have been cleaned up and debugged. This detailed guide then reveals how to detect the appearance of malicious code, decode the types of enemies they originate from, and finally, how to extricate malcode and deflect its future entry into networks.

Reverse Deception: Organized Cyber Threat Counter-Exploitation features:


    • Full coverage of the #1 feared type of network attack today, the APT
    • Descriptions of cyber espionage tactics seen in the U.S. and internationally, with comparisons of the types of countermeasures permissible by law in the U.S. and Asia versus less strict countries in Europe, the Middle East, and Africa
    • Enthralling case studies and true stories from the authors' FBI, DOD, NSA, and private sector work
    • Foreword by Fred Feer, a security professional with 40 years' experience with the U.S. Army counterintelligence, CIA, RAND, and independent consulting
    • Complete coverage of key aspects of deception, counter-deception, behavioral profiling, and security within the cyber realm
    • Cat-and-mouse strategies from the best in the game-explains how to implement deception and disinformation techniques against a variety of incoming threats aimed at enticing adversaries out into the open
    • A fresh perspective on innovative, field-tested ideas for successfully countering current digital threats-plus expected characteristics of the next threats to come
    • Legal explanations of capabilities, limitations, and requirements for assisting law enforcement investigations

Coverage includes:

Deception Throughout History to Today; The Applications & Goals of Cyber Counterintelligence; The Missions and Outcomes of Criminal Profiling; Legal & Ethical Aspects of Deception; Attack Tradecraft; Operational Deception; Tools, Tactics & Procedures; Attack Attribution; Black Hat Motivators; Understanding Advanced Persistent Threats; When & When Not to Act; Implementation & Validation Tactics

Inhaltsverzeichnis
Ch 1. Introduction
Ch 2. Deception Throughout History to Today
Ch 3. The Applications & Goals of Cyber Counterintelligence
Ch 4. The Missions and Outcomes of Criminal Profiling
Ch 5. Legal & Ethical Aspects of Deception
Ch 6. Attack Tradecraft
Ch 7. Operational Deception
Ch 8. Tools, Tactics & Procedures
Ch 9. Attack Attribution
Ch 10. Black Hat Motivators
Ch 11. Understanding Advanced Persistent Threats
Ch 12. When To & When Not To Act
Ch 13. Implementation & Validation Tactics
References
Appendices
Details
Erscheinungsjahr: 2012
Fachbereich: Datenkommunikation, Netze & Mailboxen
Genre: Importe, Informatik
Rubrik: Naturwissenschaften & Technik
Medium: Taschenbuch
Inhalt: Kartoniert / Broschiert
ISBN-13: 9780071772495
ISBN-10: 0071772499
Sprache: Englisch
Einband: Kartoniert / Broschiert
Autor: Bodmer, Sean
Kilger, Max
Carpenter, Gregory
Hersteller: McGraw-Hill Education
Verantwortliche Person für die EU: Libri GmbH, Europaallee 1, D-36244 Bad Hersfeld, gpsr@libri.de
Maße: 235 x 191 x 25 mm
Von/Mit: Sean Bodmer (u. a.)
Erscheinungsdatum: 20.08.2012
Gewicht: 0,863 kg
Artikel-ID: 131495804