Overview
A completely revised and expanded second edition to reflect the significantly changing world of privilege access management
Helps you master the attack vectors used in privilege attacks from passwords to exploits
Presents the attack chain and shows you how privilege access management protects against and detects privilege attacks
Includes use cases and methodology for deploying a successful universal privilege access management program within an organization
Access this book
Tax calculation will be finalised at checkout
Other ways to access
Table of contents (27 chapters)
-
Front Matter
Keywords
About this book
There is no one solution or strategy to provide the protection you need against all vectors and stages of an attack. And while some new and innovative products will help protect against or detect against a privilege attack, they are not guaranteed to stop 100% of malicious activity. The volume and frequency of privilege-based attacks continues to increase and test the limits of existing security controls and solution implementations.
Privileged Attack Vectors details the risks associated with poor privilege management, the techniques that threat actors leverage, and the defensive measures that organizations should adopt to protect against an incident, protect against lateral movement, and improve the ability to detect malicious activity due to the inappropriate usage of privileged credentials.
This revised and expanded second edition covers new attack vectors, has updated definitions for privileged access management (PAM), new strategies for defense, tested empirical steps for a successful implementation, and includes new disciplines for least privilege endpoint management and privileged remote access.
What You Will Learn
- Know how identities, accounts, credentials, passwords, and exploits can be leveraged to escalate privileges during an attack
- Implement defensive and monitoring strategies to mitigate privilege threats and risk
- Understand a 10-step universal privilege management implementation plan to guide you through a successful privilege access management journey
- Develop a comprehensive model for documenting risk, compliance, and reporting based on privilege session activity
Who This Book Is For
Security management professionals, new security professionals, and auditors looking to understand and solve privilege access management problems
Authors and Affiliations
About the author
Morey J. Haber is Chief Technology Officer at BeyondTrust. He has more than 20 years of IT industry experience, and has authored three Apress books: Asset Attack Vectors and Identity Attack Vectors, as well as the first edition of Privileged Attack Vectors. He joined BeyondTrust in 2012 as a part of the eEye Digital Security acquisition. He currently oversees BeyondTrust technology management solutions for vulnerability, and privileged and remote access. In 2004, he joined eEye as Director of Security Engineering and was responsible for strategic business discussions and vulnerability management architectures in Fortune 500 clients. Prior to eEye, he was Development Manager for Computer Associates, Inc. (CA), responsible for new product beta cycles and named customer accounts. He began his career as Reliability and Maintainability Engineer for a government contractor building flight and training simulators. He earned a Bachelor of Science degree in Electrical Engineering from the State University of New York at Stony Brook.
Bibliographic Information
Book Title: Privileged Attack Vectors
Book Subtitle: Building Effective Cyber-Defense Strategies to Protect Organizations
Authors: Morey J. Haber
DOI: https://doi.org/10.1007/978-1-4842-5914-6
Publisher: Apress Berkeley, CA
eBook Packages: Professional and Applied Computing, Professional and Applied Computing (R0), Apress Access Books
Copyright Information: Morey J. Haber 2020
Softcover ISBN: 978-1-4842-5913-9Published: 14 June 2020
eBook ISBN: 978-1-4842-5914-6Published: 13 June 2020
Edition Number: 2
Number of Pages: XXXV, 384
Number of Illustrations: 40 illustrations in colour
Topics: Security
Industry Sectors: Aerospace, Automotive, Biotechnology, Electronics, Engineering, Finance, Business & Banking, IT & Software, Law, Pharma, Telecommunications