The CERT Guide to Insider Threats: How to Prevent, Detect, and Respond to Information Technology Crimes (Hardcover)
暫譯: CERT 內部威脅指南：如何預防、檢測及應對資訊科技犯罪 (精裝版)

Dawn M. Cappelli, Andrew P. Moore, Randall F. Trzeciak

The CERT Guide to Insider Threats: How to Prevent, Detect, and Respond to Information Technology Crimes (Hardcover)

買這商品的人也買了...

相關主題

商品描述

Since 2001, the CERT® Insider Threat Center at Carnegie Mellon University’s Software Engineering Institute (SEI) has collected and analyzed information about more than seven hundred insider cyber crimes, ranging from national security espionage to theft of trade secrets. The CERT® Guide to Insider Threats describes CERT’s findings in practical terms, offering specific guidance and countermeasures that can be immediately applied by executives, managers, security officers, and operational staff within any private, government, or military organization.

 

The authors systematically address attacks by all types of malicious insiders, including current and former employees, contractors, business partners, outsourcers, and even cloud-computing vendors. They cover all major types of insider cyber crime: IT sabotage, intellectual property theft, and fraud. For each, they present a crime profile describing how the crime tends to evolve over time, as well as motivations, attack methods, organizational issues, and precursor warnings that could have helped the organization prevent the incident or detect it earlier. Beyond identifying crucial patterns of suspicious behavior, the authors present concrete defensive measures for protecting both systems and data.

 

This book also conveys the big picture of the insider threat problem over time: the complex interactions and unintended consequences of existing policies, practices, technology, insider mindsets, and organizational culture. Most important, it offers actionable recommendations for the entire organization, from executive management and board members to IT, data owners, HR, and legal departments.

 

With this book, you will find out how to

  • Identify hidden signs of insider IT sabotage, theft of sensitive information, and fraud
  • Recognize insider threats throughout the software development life cycle
  • Use advanced threat controls to resist attacks by both technical and nontechnical insiders
  • Increase the effectiveness of existing technical security tools by enhancing rules, configurations, and associated business processes
  • Prepare for unusual insider attacks, including attacks linked to organized crime or the Internet underground

By implementing this book’s security practices, you will be incorporating protection mechanisms designed to resist the vast majority of malicious insider attacks.

商品描述(中文翻譯)

自2001年以來，卡內基梅隆大學軟體工程研究所（SEI）的CERT®內部威脅中心已經收集並分析了超過七百起內部網路犯罪的資訊，這些犯罪範圍從國家安全間諜活動到商業機密竊取。《CERT®內部威脅指南》以實用的方式描述了CERT的研究結果，提供了具體的指導和對策，這些可以立即被任何私營、政府或軍事組織的高層、管理者、安全官員和操作人員應用。

作者系統性地針對各類惡意內部人員的攻擊進行探討，包括現任和前任員工、承包商、商業夥伴、外包商，甚至雲端計算供應商。他們涵蓋了所有主要類型的內部網路犯罪：IT破壞、智慧財產權竊取和詐騙。對於每一種犯罪，他們提供了一個犯罪概況，描述了該犯罪隨時間演變的趨勢，以及動機、攻擊方法、組織問題和可能幫助組織預防事件或更早檢測的前兆警告。除了識別可疑行為的關鍵模式外，作者還提出了具體的防禦措施，以保護系統和數據。

本書還傳達了內部威脅問題隨時間演變的全貌：現有政策、實踐、技術、內部心態和組織文化之間的複雜互動和意想不到的後果。最重要的是，它為整個組織提供了可行的建議，從高層管理和董事會成員到IT、數據擁有者、人力資源和法律部門。

通過本書，您將了解如何：

- 識別內部IT破壞、敏感信息竊取和詐騙的隱藏跡象
- 在軟體開發生命週期中識別內部威脅
- 使用先進的威脅控制來抵禦技術和非技術內部人員的攻擊
- 通過增強規則、配置和相關業務流程來提高現有技術安全工具的有效性
- 為不尋常的內部攻擊做好準備，包括與有組織犯罪或網路地下世界相關的攻擊

通過實施本書的安全實踐，您將納入旨在抵禦絕大多數惡意內部攻擊的保護機制。

類似商品