Информационная безопасность: защита и нападение, 3-е изд., Бирюков А., 2024

Данная книга выдерживает уже третье издание, предлагая читателю глубокое погружение в практические аспекты реализации конкретных атак и средств защиты. Представлены как актуальная техническая информация, так и советы по организации процесса обеспечения информационной безопасности с соответствующими примерами.

В числе рассматриваемых тем:
- атаки на беспроводные устройства;
- безопасность облачных систем;
- выявление уязвимостей;
- средства обнаружения и предотвращения вторжений;
- борьба с утечками;
- обзор методов шифрования;
- описание пакета Kali Linux;
- и многое другое.

#book #newbie

Evading EDR : A Comprehensive Guide to Defeating Endpoint Detection Systems by Matt Hand, 2023

Nearly every enterprise uses an Endpoint Detection and Response (EDR) agent to monitor the devices on their network for signs of an attack. But that doesn't mean security defenders grasp how these systems actually work. This book demystifies EDR, taking you on a deep dive into how EDRs detect adversary activity. Chapter by chapter, you’ll learn that EDR is not a magical black box—it’s just a complex software application built around a few easy-to-understand components.

The author uses his years of experience as a red team operator to investigate each of the most common sensor components, discussing their purpose, explaining their implementation, and showing the ways they collect various data points from the Microsoft operating system.

#book #defensive

Defensive Security Handbook. Best Practices for Securing Infrastructure, Lee Brotherston and Amanda Berlin, 2017

Despite the increase of high-profile hacks, record-breaking data leaks, and ransomware attacks, many organizations don’t have the budget to establish or outsource an information security (InfoSec) program, forcing them to learn on the job. For companies obliged to improvise, this pragmatic guide provides a security-101 handbook with steps, tools, processes, and ideas to help you drive maximum-security improvement at little or no cost.

Each chapter in this book provides step-by-step instructions for dealing with a specific issue, including breaches and disasters, compliance, network infrastructure and password management, vulnerability scanning, and penetration testing, among others. Network engineers, system administrators, and security professionals will learn tools and techniques to help improve security in sensible, manageable chunks.

#book #defensive