The Art of Attack: Attacker Mindset for Security Professionals (攻擊的藝術:安全專業人士的攻擊者心態)

Reynolds, Maxie

  • 出版商: Wiley
  • 出版日期: 2021-08-10
  • 定價: $1,030
  • 售價: 9.5$979
  • 貴賓價: 9.0$927
  • 語言: 英文
  • 頁數: 304
  • 裝訂: Quality Paper - also called trade paper
  • ISBN: 1119805465
  • ISBN-13: 9781119805465
  • 相關分類: 資訊安全
  • 立即出貨 (庫存 < 3)

相關主題

商品描述

The Art of Attack untangles the threads of a useful, albeit sometimes dangerous, mentality. It shows ethical hackers in Social Engineering and pentesting what an attacker mindset is and how to form one, whilst staying ethical and moral. It includes what the attacker mindset is, a story in which to showcase it, the difference between pen testers and attackers and why this book is needed.

The principles of the attacker mindset are unveiled including persistence, "start with the end," and non-linear thinking. Ethical hackers will learn the strategic tools needed to build their attacker mindset including forming the attack, process, recon, privilege escalation, and possibly most important - redundant access and escape.

The book also speaks to the tells of an attack and how to avoid one for a would-be victim - for individuals and businesses. This section of the book uses the science of psychology to take into account& amygdala hijacking and other tendencies readers need to protect against.

商品描述(中文翻譯)

《攻擊的藝術》解開了一種有用但有時危險的心態的糾結。它向社交工程和滲透測試中的道德黑客展示了攻擊者心態是什麼,以及如何形成這種心態,同時保持道德和道義。書中包括攻擊者心態的定義,以一個故事來展示它,滲透測試人員和攻擊者之間的區別,以及為什麼需要這本書。

書中揭示了攻擊者心態的原則,包括堅持不懈、從結果開始思考和非線性思維。道德黑客將學習建立攻擊者心態所需的戰略工具,包括形成攻擊的過程、情報收集、特權升級,以及可能最重要的冗餘訪問和逃逸。

這本書還談到了攻擊的跡象以及如何避免成為潛在受害者 - 不論是個人還是企業。書中的這一部分利用心理學的科學,考慮到杏仁核劫持和其他讀者需要保護自己的傾向。

作者簡介

MAXIE REYNOLDS is Technical Team Lead for Social-Engineer, LLC leading their efforts as a physical pentester and social engineer. She is a certified Ethical Hacker, Digital Forensic Investigator, and Social Engineer. She holds degrees in Computer Science, Underwater Robotics, and is qualified in Quantum Computing. She has worked as a physical pentester for banks, transport agencies, and other industries.

作者簡介(中文翻譯)

MAXIE REYNOLDS是Social-Engineer, LLC的技術團隊負責人,領導他們在物理滲透測試和社交工程方面的工作。她是一位持有認證的道德駭客、數位取證調查員和社交工程師。她擁有計算機科學、水下機器人學位,並且在量子計算方面有資格。她曾在銀行、運輸機構和其他行業擔任物理滲透測試員的工作。