The Business of Hacking: Creating, Developing, and Maintaining an Effective Penetration Testing Team

Butler, Michael, Oakley, Jacob G.

The Business of Hacking: Creating, Developing, and Maintaining an Effective Penetration Testing Team
  • 出版商: Apress
  • 出版日期: 2024-06-08
  • 售價: $1,860
  • 貴賓價: 9.5 折 $1,767
  • 語言: 英文
  • 頁數: 310
  • 裝訂: Quality Paper - also called trade paper
  • ISBN: 9798868801730
  • ISBN-13: 9798868801730
  • 相關分類: Penetration-test、駭客 Hack

    • 海外代購書籍(需單獨結帳)

相關主題

商品描述

There is a plethora of literature on the topic of penetration testing, hacking, and related fields. These books are almost exclusively concerned with the technical execution of penetration testing and occasionally the thought process of the penetration tester themselves. There is little to no literature on the unique challenges presented by creating, developing, and managing a penetration testing team that is both effective and scalable. In addition, there is little to no literature on the subject of developing contractual client relationships, marketing, finding and developing talent, and how to drive penetration test execution to achieve client needs. This book changes all that.

The Business of Hacking is a one-of-a-kind book detailing the lessons the authors learned while building penetrating testing teams from the ground up, making them profitable, and constructing management principles that ensure team scalability. You will discover both the challenges you face as you develop your team of offensive security professionals and an understanding of how to overcome them. You will gain an understanding of the client's requirements, how to meet them, and how to surpass them to provide clients with a uniquely professional experience.

The authors have spent combined decades working in various aspects of cybersecurity with a focus on offensive cybersecurity. Their experience spans military, government, and commercial industries with most of that time spent in senior leadership positions.

What you'll learn

  • How to handle and ongoing develop client relationships in a high end industry
  • Team management and how the offensive security industry comes with its own unique challenges. Experience in other industries does not guarantee success in penetration testing.
  • How to identify, understand, and over-deliver on client expectations.
  • How to staff and develop talent within the team.
  • Marketing opportunities and how to use the pentesting team as a wedge for upsell opportunities.
  • The various structures of services available that they may present to their clients.

Who This Book Is For

This book is written for anyone curious who is interested in creating a penetration testing team or business. It is also relevant for anyone currently executing such a business and even for those simply participating in the business.

商品描述(中文翻譯)

關於滲透測試、駭客和相關領域的主題，有大量的文獻可供參考。這些書籍幾乎專注於滲透測試的技術執行，偶爾也會涉及滲透測試人員的思考過程。然而，關於建立、發展和管理一支既有效又可擴展的滲透測試團隊所面臨的獨特挑戰，幾乎沒有相關文獻可供參考。此外，關於發展合約客戶關係、市場營銷、尋找和培養人才，以及如何推動滲透測試執行以滿足客戶需求的主題，也幾乎沒有相關文獻。這本書改變了這一切。

《駭客的商業》是一本獨一無二的書籍，詳細介紹了作者們在從頭開始建立滲透測試團隊、使其盈利並建立可擴展的管理原則時所學到的經驗。您將了解在發展攻擊性安全專業人員團隊時所面臨的挑戰，以及如何克服這些挑戰。您將瞭解客戶的需求，如何滿足這些需求，並如何超越期望，為客戶提供獨特的專業體驗。

作者們在各種方面從事數十年的網絡安全工作，專注於攻擊性網絡安全。他們的經驗涵蓋軍事、政府和商業行業，其中大部分時間都擔任高級領導職位。

您將學到什麼：
- 如何在高端行業中處理和持續發展客戶關係
- 團隊管理以及攻擊性安全行業所面臨的獨特挑戰。在其他行業的經驗並不能保證在滲透測試中取得成功。
- 如何識別、理解並超越客戶期望。
- 如何為團隊提供人才和發展機會。
- 市場營銷機會以及如何利用滲透測試團隊作為增值機會。
- 可向客戶提供的各種服務結構。

這本書適合對建立滲透測試團隊或業務感興趣的任何人閱讀。對於目前從事此業務的人，甚至對於僅參與此業務的人也具有相關性。

作者簡介

Michael Butler is a cybersecurity subject matter expert with 12 years of experience focusing on building, developing, and leading teams of ethical hackers. He is a primary instructor and developer of an offensive cloud security course taught both privately and at Blackhat conferences in the United States, Europe, and Asia. He has previously collaborated with Dr. Oakley as the technical reviewer for Professional Red Teaming and is the co-author of Theoretical Cybersecurity: Principles and Advanced Concepts (Apress, 2022).

Dr. Jacob G. Oakley is a cybersecurity author and subject matter expert with 16 years of experience focusing on strategic enterprise level cybersecurity architectures as well as offensive cybersecurity operations within government and commercial sectors. His previous technical books, Theoretical Cybersecurity, Professional Red Teaming, Waging Cyber War, and Cybersecurity for Space, are also published by Apress. Cybersecurity Engagements, as well as Waging Cyber War: Technical Challenges and Operational Constraints.

作者簡介(中文翻譯)

Michael Butler 是一位具有12年經驗的資安專家，專注於建立、發展和領導道德駭客團隊。他是一門攻擊性雲端安全課程的主要講師和開發者，該課程在美國、歐洲和亞洲的Blackhat會議上進行私人和公開教授。他曾與Dr. Oakley合作，擔任《Professional Red Teaming》的技術審查人員，並且是《Theoretical Cybersecurity: Principles and Advanced Concepts》（Apress，2022）的合著者。

Dr. Jacob G. Oakley 是一位資安作家和專家，擁有16年的經驗，專注於戰略企業級資安架構以及政府和商業領域的攻擊性資安操作。他之前出版的技術書籍包括《Theoretical Cybersecurity》、《Professional Red Teaming》、《Waging Cyber War》和《Cybersecurity for Space》，同樣由Apress出版。此外，他還是《Cybersecurity Engagements》和《Waging Cyber War: Technical Challenges and Operational Constraints》的作者。

類似商品