Author: Robert Lelewski
Publisher: NO STARCH PRESS, INC
ISBN: 1718503822
Category : Computers
Languages : en
Pages : 203
Book Description
The complete start-to-finish guide for planning and delivering successful cybersecurity tabletop exercises. Cybersecurity Tabletop Exercises, written by veteran security consultants Robert Lelewski and John Hollenberger, is an essential resource for cybersecurity professionals and anyone tasked with enhancing their organization’s incident response capabilities. This comprehensive guide to tabletop exercise planning and delivery offers practical insights, step-by-step instructions, and real-world examples to improve your team’s ability to prevent and respond to cyberattacks. The book is divided into two main parts. In Part I: The Tabletop Exercise Process, you’ll learn: Why you should perform tabletop exercises and what their organizational benefits are Effective planning and logistics tips, including how to gain executive sponsor support How to develop realistic scenarios, injects, and storyboards Facilitation techniques to ensure active participant engagement Evaluation methods and follow-up activities The example scenarios in Part II include: Technical tabletops covering phishing campaigns, ransomware attacks, and zero-day vulnerabilities Executive-level exercises that focus on high-impact incidents Cross-functional cases such as physical security breaches, social media compromises, and insider threats With examples tailored for various roles, you’ll discover how to transform tabletop exercises from a mere compliance requirement into a powerful strategic preparedness tool. Whether you’re new to tabletop exercises or an experienced practitioner, this book provides proven insights to strengthen your organization’s cyber incident response capabilities and overall security posture.
Cybersecurity Tabletop Exercises
Author: Robert Lelewski
Publisher: NO STARCH PRESS, INC
ISBN: 1718503822
Category : Computers
Languages : en
Pages : 203
Book Description
The complete start-to-finish guide for planning and delivering successful cybersecurity tabletop exercises. Cybersecurity Tabletop Exercises, written by veteran security consultants Robert Lelewski and John Hollenberger, is an essential resource for cybersecurity professionals and anyone tasked with enhancing their organization’s incident response capabilities. This comprehensive guide to tabletop exercise planning and delivery offers practical insights, step-by-step instructions, and real-world examples to improve your team’s ability to prevent and respond to cyberattacks. The book is divided into two main parts. In Part I: The Tabletop Exercise Process, you’ll learn: Why you should perform tabletop exercises and what their organizational benefits are Effective planning and logistics tips, including how to gain executive sponsor support How to develop realistic scenarios, injects, and storyboards Facilitation techniques to ensure active participant engagement Evaluation methods and follow-up activities The example scenarios in Part II include: Technical tabletops covering phishing campaigns, ransomware attacks, and zero-day vulnerabilities Executive-level exercises that focus on high-impact incidents Cross-functional cases such as physical security breaches, social media compromises, and insider threats With examples tailored for various roles, you’ll discover how to transform tabletop exercises from a mere compliance requirement into a powerful strategic preparedness tool. Whether you’re new to tabletop exercises or an experienced practitioner, this book provides proven insights to strengthen your organization’s cyber incident response capabilities and overall security posture.
Publisher: NO STARCH PRESS, INC
ISBN: 1718503822
Category : Computers
Languages : en
Pages : 203
Book Description
The complete start-to-finish guide for planning and delivering successful cybersecurity tabletop exercises. Cybersecurity Tabletop Exercises, written by veteran security consultants Robert Lelewski and John Hollenberger, is an essential resource for cybersecurity professionals and anyone tasked with enhancing their organization’s incident response capabilities. This comprehensive guide to tabletop exercise planning and delivery offers practical insights, step-by-step instructions, and real-world examples to improve your team’s ability to prevent and respond to cyberattacks. The book is divided into two main parts. In Part I: The Tabletop Exercise Process, you’ll learn: Why you should perform tabletop exercises and what their organizational benefits are Effective planning and logistics tips, including how to gain executive sponsor support How to develop realistic scenarios, injects, and storyboards Facilitation techniques to ensure active participant engagement Evaluation methods and follow-up activities The example scenarios in Part II include: Technical tabletops covering phishing campaigns, ransomware attacks, and zero-day vulnerabilities Executive-level exercises that focus on high-impact incidents Cross-functional cases such as physical security breaches, social media compromises, and insider threats With examples tailored for various roles, you’ll discover how to transform tabletop exercises from a mere compliance requirement into a powerful strategic preparedness tool. Whether you’re new to tabletop exercises or an experienced practitioner, this book provides proven insights to strengthen your organization’s cyber incident response capabilities and overall security posture.
Serious Games
Author: Minhua Ma
Publisher: Springer Nature
ISBN: 3030618145
Category : Computers
Languages : en
Pages : 306
Book Description
This book constitutes the refereed proceedings of the 6th Joint International Conference on Serious Games, JCSG 2020, held in Stoke-on-Trent, UK, in November 2020. The 19 full papers presented together with 3 short papers were carefully reviewed and selected from 38 submissions. The papers offer a wide range in the use of serious games in several fields like learning, simulation, training, health, well-being, management, assessment or marketing and much more.
Publisher: Springer Nature
ISBN: 3030618145
Category : Computers
Languages : en
Pages : 306
Book Description
This book constitutes the refereed proceedings of the 6th Joint International Conference on Serious Games, JCSG 2020, held in Stoke-on-Trent, UK, in November 2020. The 19 full papers presented together with 3 short papers were carefully reviewed and selected from 38 submissions. The papers offer a wide range in the use of serious games in several fields like learning, simulation, training, health, well-being, management, assessment or marketing and much more.
Responding to Targeted Cyberattacks
Author: ISACA
Publisher: ISACA
ISBN: 1604203366
Category : Technology & Engineering
Languages : en
Pages : 88
Book Description
Publisher: ISACA
ISBN: 1604203366
Category : Technology & Engineering
Languages : en
Pages : 88
Book Description
Malware Data Science
Author: Joshua Saxe
Publisher: No Starch Press
ISBN: 1593278594
Category : Computers
Languages : en
Pages : 274
Book Description
Malware Data Science explains how to identify, analyze, and classify large-scale malware using machine learning and data visualization. Security has become a "big data" problem. The growth rate of malware has accelerated to tens of millions of new files per year while our networks generate an ever-larger flood of security-relevant data each day. In order to defend against these advanced attacks, you'll need to know how to think like a data scientist. In Malware Data Science, security data scientist Joshua Saxe introduces machine learning, statistics, social network analysis, and data visualization, and shows you how to apply these methods to malware detection and analysis. You'll learn how to: - Analyze malware using static analysis - Observe malware behavior using dynamic analysis - Identify adversary groups through shared code analysis - Catch 0-day vulnerabilities by building your own machine learning detector - Measure malware detector accuracy - Identify malware campaigns, trends, and relationships through data visualization Whether you're a malware analyst looking to add skills to your existing arsenal, or a data scientist interested in attack detection and threat intelligence, Malware Data Science will help you stay ahead of the curve.
Publisher: No Starch Press
ISBN: 1593278594
Category : Computers
Languages : en
Pages : 274
Book Description
Malware Data Science explains how to identify, analyze, and classify large-scale malware using machine learning and data visualization. Security has become a "big data" problem. The growth rate of malware has accelerated to tens of millions of new files per year while our networks generate an ever-larger flood of security-relevant data each day. In order to defend against these advanced attacks, you'll need to know how to think like a data scientist. In Malware Data Science, security data scientist Joshua Saxe introduces machine learning, statistics, social network analysis, and data visualization, and shows you how to apply these methods to malware detection and analysis. You'll learn how to: - Analyze malware using static analysis - Observe malware behavior using dynamic analysis - Identify adversary groups through shared code analysis - Catch 0-day vulnerabilities by building your own machine learning detector - Measure malware detector accuracy - Identify malware campaigns, trends, and relationships through data visualization Whether you're a malware analyst looking to add skills to your existing arsenal, or a data scientist interested in attack detection and threat intelligence, Malware Data Science will help you stay ahead of the curve.
Cybersecurity Attacks – Red Team Strategies
Author: Johann Rehberger
Publisher: Packt Publishing Ltd
ISBN: 1838825509
Category : Computers
Languages : en
Pages : 525
Book Description
Develop your red team skills by learning essential foundational tactics, techniques, and procedures, and boost the overall security posture of your organization by leveraging the homefield advantage Key FeaturesBuild, manage, and measure an offensive red team programLeverage the homefield advantage to stay ahead of your adversariesUnderstand core adversarial tactics and techniques, and protect pentesters and pentesting assetsBook Description It's now more important than ever for organizations to be ready to detect and respond to security events and breaches. Preventive measures alone are not enough for dealing with adversaries. A well-rounded prevention, detection, and response program is required. This book will guide you through the stages of building a red team program, including strategies and homefield advantage opportunities to boost security. The book starts by guiding you through establishing, managing, and measuring a red team program, including effective ways for sharing results and findings to raise awareness. Gradually, you'll learn about progressive operations such as cryptocurrency mining, focused privacy testing, targeting telemetry, and even blue team tooling. Later, you'll discover knowledge graphs and how to build them, then become well-versed with basic to advanced techniques related to hunting for credentials, and learn to automate Microsoft Office and browsers to your advantage. Finally, you'll get to grips with protecting assets using decoys, auditing, and alerting with examples for major operating systems. By the end of this book, you'll have learned how to build, manage, and measure a red team program effectively and be well-versed with the fundamental operational techniques required to enhance your existing skills. What you will learnUnderstand the risks associated with security breachesImplement strategies for building an effective penetration testing teamMap out the homefield using knowledge graphsHunt credentials using indexing and other practical techniquesGain blue team tooling insights to enhance your red team skillsCommunicate results and influence decision makers with appropriate dataWho this book is for This is one of the few detailed cybersecurity books for penetration testers, cybersecurity analysts, security leaders and strategists, as well as red team members and chief information security officers (CISOs) looking to secure their organizations from adversaries. The program management part of this book will also be useful for beginners in the cybersecurity domain. To get the most out of this book, some penetration testing experience, and software engineering and debugging skills are necessary.
Publisher: Packt Publishing Ltd
ISBN: 1838825509
Category : Computers
Languages : en
Pages : 525
Book Description
Develop your red team skills by learning essential foundational tactics, techniques, and procedures, and boost the overall security posture of your organization by leveraging the homefield advantage Key FeaturesBuild, manage, and measure an offensive red team programLeverage the homefield advantage to stay ahead of your adversariesUnderstand core adversarial tactics and techniques, and protect pentesters and pentesting assetsBook Description It's now more important than ever for organizations to be ready to detect and respond to security events and breaches. Preventive measures alone are not enough for dealing with adversaries. A well-rounded prevention, detection, and response program is required. This book will guide you through the stages of building a red team program, including strategies and homefield advantage opportunities to boost security. The book starts by guiding you through establishing, managing, and measuring a red team program, including effective ways for sharing results and findings to raise awareness. Gradually, you'll learn about progressive operations such as cryptocurrency mining, focused privacy testing, targeting telemetry, and even blue team tooling. Later, you'll discover knowledge graphs and how to build them, then become well-versed with basic to advanced techniques related to hunting for credentials, and learn to automate Microsoft Office and browsers to your advantage. Finally, you'll get to grips with protecting assets using decoys, auditing, and alerting with examples for major operating systems. By the end of this book, you'll have learned how to build, manage, and measure a red team program effectively and be well-versed with the fundamental operational techniques required to enhance your existing skills. What you will learnUnderstand the risks associated with security breachesImplement strategies for building an effective penetration testing teamMap out the homefield using knowledge graphsHunt credentials using indexing and other practical techniquesGain blue team tooling insights to enhance your red team skillsCommunicate results and influence decision makers with appropriate dataWho this book is for This is one of the few detailed cybersecurity books for penetration testers, cybersecurity analysts, security leaders and strategists, as well as red team members and chief information security officers (CISOs) looking to secure their organizations from adversaries. The program management part of this book will also be useful for beginners in the cybersecurity domain. To get the most out of this book, some penetration testing experience, and software engineering and debugging skills are necessary.
Building a Better Business Using the Lego Serious Play Method
Author: Per Kristiansen
Publisher: John Wiley & Sons
ISBN: 1118832450
Category : Business & Economics
Languages : en
Pages : 247
Book Description
Unleash innovation potential with creative, serious play Building a Better Business Using the LEGO® SERIOUS PLAY® Method delivers a creative approach to enhancing innovation and improving business performance, with the focus on unleashing play. Written by the two original Master Trainers for LEGO SERIOUS PLAY (LSP), the book outlines how LSP can develop teams, people, relationships and business . Based on the merging of play with organizational development, systems thinking and strategy development, LSP can foster improved meetings, faster innovation processes, team growth, and better communication. The belief that everyone intends to "do good" and has the potential to do it is at the heart of LSP. The method nurtures the idea that everyone in an organization can contribute to discussions and outcomes. Building with LEGO bricks is a type of creative play that triggers a different kind of thought process, unleashing imagination and potential that is frequently untapped by the logical mind. The book explains this hands-on, minds-on approach, and discusses the theory as well as the practical implementation of LSP. Topics include: Observation of internal and external interaction dynamics Fostering a free and honest exchange of opinions Suspending hierarchy for better, more effective communication Facilitating change by encouraging exploration The LEGO SERIOUS PLAY method is employed by start-ups and multinational corporations alike to maximize synergy among teams and throughout organizations. For leaders looking to boost effectiveness and see better results, Building a Better Business Using the LEGO® SERIOUS PLAY® Method is a comprehensive introduction to this creative management technique.
Publisher: John Wiley & Sons
ISBN: 1118832450
Category : Business & Economics
Languages : en
Pages : 247
Book Description
Unleash innovation potential with creative, serious play Building a Better Business Using the LEGO® SERIOUS PLAY® Method delivers a creative approach to enhancing innovation and improving business performance, with the focus on unleashing play. Written by the two original Master Trainers for LEGO SERIOUS PLAY (LSP), the book outlines how LSP can develop teams, people, relationships and business . Based on the merging of play with organizational development, systems thinking and strategy development, LSP can foster improved meetings, faster innovation processes, team growth, and better communication. The belief that everyone intends to "do good" and has the potential to do it is at the heart of LSP. The method nurtures the idea that everyone in an organization can contribute to discussions and outcomes. Building with LEGO bricks is a type of creative play that triggers a different kind of thought process, unleashing imagination and potential that is frequently untapped by the logical mind. The book explains this hands-on, minds-on approach, and discusses the theory as well as the practical implementation of LSP. Topics include: Observation of internal and external interaction dynamics Fostering a free and honest exchange of opinions Suspending hierarchy for better, more effective communication Facilitating change by encouraging exploration The LEGO SERIOUS PLAY method is employed by start-ups and multinational corporations alike to maximize synergy among teams and throughout organizations. For leaders looking to boost effectiveness and see better results, Building a Better Business Using the LEGO® SERIOUS PLAY® Method is a comprehensive introduction to this creative management technique.
The Practice of Network Security Monitoring
Author: Richard Bejtlich
Publisher: No Starch Press
ISBN: 159327534X
Category : Computers
Languages : en
Pages : 436
Book Description
Network security is not simply about building impenetrable walls—determined attackers will eventually overcome traditional defenses. The most effective computer security strategies integrate network security monitoring (NSM): the collection and analysis of data to help you detect and respond to intrusions. In The Practice of Network Security Monitoring, Mandiant CSO Richard Bejtlich shows you how to use NSM to add a robust layer of protection around your networks—no prior experience required. To help you avoid costly and inflexible solutions, he teaches you how to deploy, build, and run an NSM operation using open source software and vendor-neutral tools. You'll learn how to: –Determine where to deploy NSM platforms, and size them for the monitored networks –Deploy stand-alone or distributed NSM installations –Use command line and graphical packet analysis tools, and NSM consoles –Interpret network evidence from server-side and client-side intrusions –Integrate threat intelligence into NSM software to identify sophisticated adversaries There’s no foolproof way to keep attackers out of your network. But when they get in, you’ll be prepared. The Practice of Network Security Monitoring will show you how to build a security net to detect, contain, and control them. Attacks are inevitable, but losing sensitive data shouldn't be.
Publisher: No Starch Press
ISBN: 159327534X
Category : Computers
Languages : en
Pages : 436
Book Description
Network security is not simply about building impenetrable walls—determined attackers will eventually overcome traditional defenses. The most effective computer security strategies integrate network security monitoring (NSM): the collection and analysis of data to help you detect and respond to intrusions. In The Practice of Network Security Monitoring, Mandiant CSO Richard Bejtlich shows you how to use NSM to add a robust layer of protection around your networks—no prior experience required. To help you avoid costly and inflexible solutions, he teaches you how to deploy, build, and run an NSM operation using open source software and vendor-neutral tools. You'll learn how to: –Determine where to deploy NSM platforms, and size them for the monitored networks –Deploy stand-alone or distributed NSM installations –Use command line and graphical packet analysis tools, and NSM consoles –Interpret network evidence from server-side and client-side intrusions –Integrate threat intelligence into NSM software to identify sophisticated adversaries There’s no foolproof way to keep attackers out of your network. But when they get in, you’ll be prepared. The Practice of Network Security Monitoring will show you how to build a security net to detect, contain, and control them. Attacks are inevitable, but losing sensitive data shouldn't be.
Hacking Exposed Industrial Control Systems: ICS and SCADA Security Secrets & Solutions
Author: Clint Bodungen
Publisher: McGraw Hill Professional
ISBN: 1259589722
Category : Computers
Languages : en
Pages : 417
Book Description
Learn to defend crucial ICS/SCADA infrastructure from devastating attacks the tried-and-true Hacking Exposed way This practical guide reveals the powerful weapons and devious methods cyber-terrorists use to compromise the devices, applications, and systems vital to oil and gas pipelines, electrical grids, and nuclear refineries. Written in the battle-tested Hacking Exposed style, the book arms you with the skills and tools necessary to defend against attacks that are debilitating—and potentially deadly. Hacking Exposed Industrial Control Systems: ICS and SCADA Security Secrets & Solutions explains vulnerabilities and attack vectors specific to ICS/SCADA protocols, applications, hardware, servers, and workstations. You will learn how hackers and malware, such as the infamous Stuxnet worm, can exploit them and disrupt critical processes, compromise safety, and bring production to a halt. The authors fully explain defense strategies and offer ready-to-deploy countermeasures. Each chapter features a real-world case study as well as notes, tips, and cautions. Features examples, code samples, and screenshots of ICS/SCADA-specific attacks Offers step-by-step vulnerability assessment and penetration test instruction Written by a team of ICS/SCADA security experts and edited by Hacking Exposed veteran Joel Scambray
Publisher: McGraw Hill Professional
ISBN: 1259589722
Category : Computers
Languages : en
Pages : 417
Book Description
Learn to defend crucial ICS/SCADA infrastructure from devastating attacks the tried-and-true Hacking Exposed way This practical guide reveals the powerful weapons and devious methods cyber-terrorists use to compromise the devices, applications, and systems vital to oil and gas pipelines, electrical grids, and nuclear refineries. Written in the battle-tested Hacking Exposed style, the book arms you with the skills and tools necessary to defend against attacks that are debilitating—and potentially deadly. Hacking Exposed Industrial Control Systems: ICS and SCADA Security Secrets & Solutions explains vulnerabilities and attack vectors specific to ICS/SCADA protocols, applications, hardware, servers, and workstations. You will learn how hackers and malware, such as the infamous Stuxnet worm, can exploit them and disrupt critical processes, compromise safety, and bring production to a halt. The authors fully explain defense strategies and offer ready-to-deploy countermeasures. Each chapter features a real-world case study as well as notes, tips, and cautions. Features examples, code samples, and screenshots of ICS/SCADA-specific attacks Offers step-by-step vulnerability assessment and penetration test instruction Written by a team of ICS/SCADA security experts and edited by Hacking Exposed veteran Joel Scambray
The Art of Mac Malware, Volume 1
Author: Patrick Wardle
Publisher: No Starch Press
ISBN: 1718501943
Category : Computers
Languages : en
Pages : 329
Book Description
A comprehensive guide to the threats facing Apple computers and the foundational knowledge needed to become a proficient Mac malware analyst. Defenders must fully understand how malicious software works if they hope to stay ahead of the increasingly sophisticated threats facing Apple products today. The Art of Mac Malware, Volume 1: The Guide to Analyzing Malicious Software is a comprehensive handbook to cracking open these malicious programs and seeing what’s inside. Discover the secrets of nation state backdoors, destructive ransomware, and subversive cryptocurrency miners as you uncover their infection methods, persistence strategies, and insidious capabilities. Then work with and extend foundational reverse-engineering tools to extract and decrypt embedded strings, unpack protected Mach-O malware, and even reconstruct binary code. Next, using a debugger, you’ll execute the malware, instruction by instruction, to discover exactly how it operates. In the book’s final section, you’ll put these lessons into practice by analyzing a complex Mac malware specimen on your own. You’ll learn to: Recognize common infections vectors, persistence mechanisms, and payloads leveraged by Mac malware Triage unknown samples in order to quickly classify them as benign or malicious Work with static analysis tools, including disassemblers, in order to study malicious scripts and compiled binaries Leverage dynamical analysis tools, such as monitoring tools and debuggers, to gain further insight into sophisticated threats Quickly identify and bypass anti-analysis techniques aimed at thwarting your analysis attempts A former NSA hacker and current leader in the field of macOS threat analysis, Patrick Wardle uses real-world examples pulled from his original research. The Art of Mac Malware, Volume 1: The Guide to Analyzing Malicious Software is the definitive resource to battling these ever more prevalent and insidious Apple-focused threats.
Publisher: No Starch Press
ISBN: 1718501943
Category : Computers
Languages : en
Pages : 329
Book Description
A comprehensive guide to the threats facing Apple computers and the foundational knowledge needed to become a proficient Mac malware analyst. Defenders must fully understand how malicious software works if they hope to stay ahead of the increasingly sophisticated threats facing Apple products today. The Art of Mac Malware, Volume 1: The Guide to Analyzing Malicious Software is a comprehensive handbook to cracking open these malicious programs and seeing what’s inside. Discover the secrets of nation state backdoors, destructive ransomware, and subversive cryptocurrency miners as you uncover their infection methods, persistence strategies, and insidious capabilities. Then work with and extend foundational reverse-engineering tools to extract and decrypt embedded strings, unpack protected Mach-O malware, and even reconstruct binary code. Next, using a debugger, you’ll execute the malware, instruction by instruction, to discover exactly how it operates. In the book’s final section, you’ll put these lessons into practice by analyzing a complex Mac malware specimen on your own. You’ll learn to: Recognize common infections vectors, persistence mechanisms, and payloads leveraged by Mac malware Triage unknown samples in order to quickly classify them as benign or malicious Work with static analysis tools, including disassemblers, in order to study malicious scripts and compiled binaries Leverage dynamical analysis tools, such as monitoring tools and debuggers, to gain further insight into sophisticated threats Quickly identify and bypass anti-analysis techniques aimed at thwarting your analysis attempts A former NSA hacker and current leader in the field of macOS threat analysis, Patrick Wardle uses real-world examples pulled from his original research. The Art of Mac Malware, Volume 1: The Guide to Analyzing Malicious Software is the definitive resource to battling these ever more prevalent and insidious Apple-focused threats.
Cybersecurity in Elections
Author: Sam van der Staak
Publisher: International Institute for Democracy and Electoral Assistance (International IDEA)
ISBN: 9176712559
Category : Political Science
Languages : en
Pages : 100
Book Description
Information and communication technologies are increasingly prevalent in electoral management and democratic processes, even for countries without any form of electronic voting. These technologies offer numerous new opportunities, but also new threats. Cybersecurity is currently one of the greatest electoral challenges. It involves a broad range of actors, including electoral management bodies, cybersecurity expert bodies and security agencies. Many countries have found that interagency collaboration is essential for defending elections against digital threats. In recent years significant advances have been made in organizing such collaboration at the domestic and international levels. This guide tracks how countries are making progress on improving cybersecurity in elections. Based on an extensive collection of 20 case studies from all over the world, it provides lessons for those wanting to strengthen their defences against cyberattacks.
Publisher: International Institute for Democracy and Electoral Assistance (International IDEA)
ISBN: 9176712559
Category : Political Science
Languages : en
Pages : 100
Book Description
Information and communication technologies are increasingly prevalent in electoral management and democratic processes, even for countries without any form of electronic voting. These technologies offer numerous new opportunities, but also new threats. Cybersecurity is currently one of the greatest electoral challenges. It involves a broad range of actors, including electoral management bodies, cybersecurity expert bodies and security agencies. Many countries have found that interagency collaboration is essential for defending elections against digital threats. In recent years significant advances have been made in organizing such collaboration at the domestic and international levels. This guide tracks how countries are making progress on improving cybersecurity in elections. Based on an extensive collection of 20 case studies from all over the world, it provides lessons for those wanting to strengthen their defences against cyberattacks.