國立高雄大學圖資館 |

Language: English

Back

Asset attack vectorsbuilding effecti...

Haber, Morey J.

Asset attack vectorsbuilding effective vulnerability management strategies to protect organizations /

Record Type:	Electronic resources : Monograph/item
Title/Author:	Asset attack vectorsby Morey J. Haber, Brad Hibbert.
Reminder of title:	building effective vulnerability management strategies to protect organizations /
Author:	Haber, Morey J.
other author:	Hibbert, Brad.
Published:	Berkeley, CA :Apress :2018.
Description:	xxxvii, 371 p. :digital ;24 cm.
Contained By:	Springer eBooks
Subject:	Computer security.
Online resource:	http://dx.doi.org/10.1007/978-1-4842-3627-7
ISBN:	9781484236277$q(electronic bk.)

Asset attack vectorsbuilding effective vulnerability management strategies to protect organizations /
Haber, Morey J.

Asset attack vectorsbuilding effective vulnerability management strategies to protect organizations /[electronic resource] :by Morey J. Haber, Brad Hibbert. - Berkeley, CA :Apress :2018. - xxxvii, 371 p. :digital ;24 cm.

Chapter 1: The Attack Chain -- Chapter 2: The Vulnerability Landscape -- Chapter 3: Threat Intelligence -- Chapter 4: Credential Asset Risks -- Chapter 5: Vulnerability Assessment -- Chapter 6: Configuration Assessment -- Chapter 7: Risk Measurement -- Chapter 8: Vulnerability States -- Chapter 9: Vulnerability Authorities -- Chapter 10: Penetration Testing -- Chapter 11: Remediation -- Chapter 12: The Vulnerability Management Program -- Chapter 13: Vulnerability Management Planning -- Chapter 14: Vulnerability Management Development -- Chapter 15: Vulnerability Management Deployment -- Chapter 16: Vulnerability Management Operations -- Chapter 17: Vulnerability Management Architecture -- Chapter 18: Sample Vulnerability Plan -- Chapter 19: Regulatory Compliance -- Chapter 20: Risk Management Frameworks -- Chapter 21: Making It All Work -- Chapter 22: Tales from the Trenches -- Chapter 23: Final Recommendations -- Chapter 24: Conclusion -- Appendix A: Sample Request For Proposal (RFP) -- Appendix B: Request for Proposal Spreadsheet.

Build an effective vulnerability management strategy to protect your organization's assets, applications, and data. Today's network environments are dynamic, requiring multiple defenses to mitigate vulnerabilities and stop data breaches. In the modern enterprise, everything connected to the network is a target. Attack surfaces are rapidly expanding to include not only traditional servers and desktops, but also routers, printers, cameras, and other IOT devices. It doesn't matter whether an organization uses LAN, WAN, wireless, or even a modern PAN--savvy criminals have more potential entry points than ever before. To stay ahead of these threats, IT and security leaders must be aware of exposures and understand their potential impact. Asset Attack Vectors will help you build a vulnerability management program designed to work in the modern threat environment. Drawing on years of combined experience, the authors detail the latest techniques for threat analysis, risk measurement, and regulatory reporting. They also outline practical service level agreements (SLAs) for vulnerability management and patch management. Vulnerability management needs to be more than a compliance check box; it should be the foundation of your organization's cybersecurity strategy. Read Asset Attack Vectors to get ahead of threats and protect your organization with an effective asset protection strategy. What You'll Learn: Create comprehensive assessment and risk identification policies and procedures Implement a complete vulnerability management workflow in nine easy steps Understand the implications of active, dormant, and carrier vulnerability states Develop, deploy, and maintain custom and commercial vulnerability management programs Discover the best strategies for vulnerability remediation, mitigation, and removal Automate credentialed scans that leverage least-privilege access principles Read real-world case studies that share successful strategies and reveal potential pitfalls.

ISBN: 9781484236277$q(electronic bk.)

Standard No.: 10.1007/978-1-4842-3627-7doiSubjects--Topical Terms:

184416
Computer security.

LC Class. No.: QA76.9.A25 / H334 2018

Dewey Class. No.: 005.8

Asset attack vectorsbuilding effective vulnerability management strategies to protect organizations /
LDR:04002nmm a2200289 a 4500 001 540918
003 DE-He213
005 20190116101218.0
006 m d
007 cr nn 008maaau
008 190308s2018 cau s 0 eng d
020 $a 9781484236277$q(electronic bk.)
020 $a 9781484236260$q(paper)
024 7 $a 10.1007/978-1-4842-3627-7 $2 doi
035 $a 978-1-4842-3627-7
040 $a GP $c GP
041 0 $a eng
050 4 $a QA76.9.A25 $b H334 2018
082 0 4 $a 005.8 $2 23
090 $a QA76.9.A25 $b H114 2018
100 1 $a Haber, Morey J. $3 803930
245 1 0 $a Asset attack vectors $h [electronic resource] : $b building effective vulnerability management strategies to protect organizations / $c by Morey J. Haber, Brad Hibbert.
260 $a Berkeley, CA : $b Apress : $b Imprint: Apress, $c 2018.
300 $a xxxvii, 371 p. : $b digital ; $c 24 cm.
505 0 $a Chapter 1: The Attack Chain -- Chapter 2: The Vulnerability Landscape -- Chapter 3: Threat Intelligence -- Chapter 4: Credential Asset Risks -- Chapter 5: Vulnerability Assessment -- Chapter 6: Configuration Assessment -- Chapter 7: Risk Measurement -- Chapter 8: Vulnerability States -- Chapter 9: Vulnerability Authorities -- Chapter 10: Penetration Testing -- Chapter 11: Remediation -- Chapter 12: The Vulnerability Management Program -- Chapter 13: Vulnerability Management Planning -- Chapter 14: Vulnerability Management Development -- Chapter 15: Vulnerability Management Deployment -- Chapter 16: Vulnerability Management Operations -- Chapter 17: Vulnerability Management Architecture -- Chapter 18: Sample Vulnerability Plan -- Chapter 19: Regulatory Compliance -- Chapter 20: Risk Management Frameworks -- Chapter 21: Making It All Work -- Chapter 22: Tales from the Trenches -- Chapter 23: Final Recommendations -- Chapter 24: Conclusion -- Appendix A: Sample Request For Proposal (RFP) -- Appendix B: Request for Proposal Spreadsheet.
520 $a Build an effective vulnerability management strategy to protect your organization's assets, applications, and data. Today's network environments are dynamic, requiring multiple defenses to mitigate vulnerabilities and stop data breaches. In the modern enterprise, everything connected to the network is a target. Attack surfaces are rapidly expanding to include not only traditional servers and desktops, but also routers, printers, cameras, and other IOT devices. It doesn't matter whether an organization uses LAN, WAN, wireless, or even a modern PAN--savvy criminals have more potential entry points than ever before. To stay ahead of these threats, IT and security leaders must be aware of exposures and understand their potential impact. Asset Attack Vectors will help you build a vulnerability management program designed to work in the modern threat environment. Drawing on years of combined experience, the authors detail the latest techniques for threat analysis, risk measurement, and regulatory reporting. They also outline practical service level agreements (SLAs) for vulnerability management and patch management. Vulnerability management needs to be more than a compliance check box; it should be the foundation of your organization's cybersecurity strategy. Read Asset Attack Vectors to get ahead of threats and protect your organization with an effective asset protection strategy. What You'll Learn: Create comprehensive assessment and risk identification policies and procedures Implement a complete vulnerability management workflow in nine easy steps Understand the implications of active, dormant, and carrier vulnerability states Develop, deploy, and maintain custom and commercial vulnerability management programs Discover the best strategies for vulnerability remediation, mitigation, and removal Automate credentialed scans that leverage least-privilege access principles Read real-world case studies that share successful strategies and reveal potential pitfalls.
650 0 $a Computer security. $3 184416
650 1 4 $a Computer Science. $3 212513
650 2 4 $a Security. $3 760527
700 1 $a Hibbert, Brad. $3 803931
710 2 $a SpringerLink (Online service) $3 273601
773 0 $t Springer eBooks
856 4 0 $u http://dx.doi.org/10.1007/978-1-4842-3627-7
950 $a Professional and Applied Computing (Springer-12059)