Cantitate/Preț
Produs
Total produse
Vezi coșul
Identity Attack Vectors: Implementing an Effective Identity and Access Management Solution de Morey J. Haber

Identity Attack Vectors: Implementing an Effective Identity and Access Management Solution

Autor Morey J. Haber, Darran Rolls
en Limba Engleză Paperback – 19 dec 2019
Discover how poor identity and privilege management can be leveraged to compromise accounts and credentials within an organization. Learn how role-based identity assignments, entitlements, and auditing strategies can be implemented to mitigate the threats leveraging accounts and identities and how to manage compliance for regulatory initiatives.
As a solution, Identity Access Management (IAM) has emerged as the cornerstone of enterprise security.  Managing accounts, credentials, roles, certification, and attestation reporting for all resources is now a security and compliance mandate. When identity theft and poor identity management is leveraged as an attack vector, risk and vulnerabilities increase exponentially. As cyber attacks continue to increase in volume and sophistication, it is not a matter of if, but when, your organization will have an incident. Threat actors target accounts, users, and their associated identities, to conduct their malicious activities through privileged attacks and asset vulnerabilities.Identity Attack Vectors details the risks associated with poor identity management practices, the techniques that threat actors and insiders leverage, and the operational best practices that organizations should adopt to protect against identity theft and account compromises, and to develop an effective identity governance program.


What You Will Learn
  • Understand the concepts behind an identity and how their associated credentials and accounts can be leveraged as an attack vector
  • Implement an effective Identity Access Management (IAM) program to manage identities and roles, and provide certification for regulatory compliance
  • See where identity management controls play a part of the cyber kill chain and how privileges should be managed as a potential weak link
  • Build upon industry standards to integrate key identity management technologies into a corporate ecosystem
  • Plan for a successful deployment, implementation scope, measurable risk reduction, auditing and discovery, regulatory reporting, and oversight based on real-world strategies to prevent identity attack vectors


Who This Book Is For
Management and implementers in IT operations, security, and auditing looking to understand and implement an identity access management program and manage privileges in these environments
Citește tot Restrânge

Toate formatele și edițiile

Toate formatele și edițiile Preț Express
Paperback (2) 20799 lei  38-45 zile
  Apress – 31 mar 2024 28537 lei  3-5 săpt.
  Apress – 19 dec 2019 20799 lei  38-45 zile

Preț: 20799 lei

Preț vechi: 25999 lei
-20% Nou

Puncte Express: 312
Preț estimativ în valută:
3980€ • 4150$ • 3308£

Carte tipărită la comandă

Livrare economică 17-24 martie

 Adaugă în coș

Wish list
Gift list
Am citit!
Adaugă în listă
Preluare comenzi: 021 569.72.76

Specificații

ISBN-13: 9781484251645
ISBN-10: 1484251644
Pagini: 196
Ilustrații: XXIII, 196 p. 33 illus.
Dimensiuni: 178 x 254 mm
Greutate: 0.45 kg
Ediția:1st ed.
Editura: Apress
Colecția Apress
Locul publicării:Berkeley, CA, United States

Cuprins

Chapter 1: The Three Pillars of Cybersecurity.- Chapter 2: A Nuance on Lateral Movement .- Chapter 3: The Five A’s of Enterprise IAM.- Chapter 4: Understanding Enterprise Identity.- Chapter 5: BOTS .- Chapter 6: Identity Governance Defined.- Chapter 7: The Identity Governance Process.- Chapter 8: Meeting Regulatory Compliance Mandates.- Chapter 9: Indicators of Compromise.- Chapter 10: Identity Attack Vectors.- Chapter 11: Identity Management Controls in the Cyber Kill Chain .- Chapter 12: Identity Management Program Planning .- Chapter 13: Privileged Access Management.- Chapter 14: Just-In-Time Access Management.- Chapter 15: Identity Obfuscation.- Chapter 16: System for Cross-domain Identity Management (SCIM).- Chapter 17: Remote Access.- Chapter 18: Identity-Based Threat Response.- Chapter 19: Biometric Risks Related to Identities.- Chapter 20: Blockchain and Identity Management.- Chapter 21: Conclusion.

Notă biografică

Morey J. Haber is Chief Technology Officer at BeyondTrust. He has more than 20 years of IT industry experience, and has authored two Apress books: Privileged Attack Vectors and Asset Attack Vectors. He joined BeyondTrust in 2012 as a part of the eEye Digital Security acquisition. He currently oversees BeyondTrust technology management solutions for vulnerability, and privileged and remote access. In 2004, he joined eEye as Director of Security Engineering and was responsible for strategic business discussions and vulnerability management architectures in Fortune 500 clients. Prior to eEye, he was Development Manager for Computer Associates, Inc. (CA), responsible for new product beta cycles and named customer accounts. He began his career as Reliability and Maintainability Engineer for a government contractor building flight and training simulators. He earned a Bachelor of Science degree in Electrical Engineering from the State University of New York at Stony Brook.
Darran Rolls is CISO and Chief Technology Officer at SailPoint, where he is responsible for directing the company’s technology strategy and security operations. He has a long history in identity management and security at companies such as Tivoli Systems, IBM, Waveset Technologies, and Sun Microsystems. He has helped design, build, and deliver innovative, ground-breaking technology solutions that have defined and shaped the identity and access management (IAM) industry. He frequently speaks at industry events and to customers about IAM and next-generation enterprise security solutions.

Textul de pe ultima copertă

Discover how poor identity and privilege management can be leveraged to compromise accounts and credentials within an organization. Learn how role-based identity assignments, entitlements, and auditing strategies can be implemented to mitigate the threats leveraging accounts and identities and how to manage compliance for regulatory initiatives.
As a solution, Identity Access Management (IAM) has emerged as the cornerstone of enterprise security.  Managing accounts, credentials, roles, certification, and attestation reporting for all resources is now a security and compliance mandate. When identity theft and poor identity management is leveraged as an attack vector, risk and vulnerabilities increase exponentially. As cyber attacks continue to increase in volume and sophistication, it is not a matter of if, but when, your organization will have an incident. Threat actors target accounts, users, and their associated identities, to conduct their malicious activities through privileged attacks and asset vulnerabilities.
Identity Attack Vectors details the risks associated with poor identity management practices, the techniques that threat actors and insiders leverage, and the operational best practices that organizations should adopt to protect against identity theft and account compromises, and to develop an effective identity governance program.
You will:
  • Understand the concepts behind an identity and how their associated credentials and accounts can be leveraged as an attack vector
  • Implement an effective Identity Access Management (IAM) program to manage identities and roles, and provide certification for regulatory compliance
  • See where identity management controls play a part of the cyber kill chain and how privileges should be managed as a potential weak link
  • Build upon industry standards to integrate key identity management technologies into a corporate ecosystem
  • Plan for a successful deployment, implementation scope, measurable risk reduction, auditing and discovery, regulatory reporting, and oversight based on real-world strategies to prevent identity attack vectors


Caracteristici

Details how best to balance between operational efficiency, security, and compliance when deploying a comprehensive identity management strategy Explores a methodology for deploying a success identity access management program within an organization and managing the critical identities associated with privileged access Provides a foundation for the importance of identity access management and the attack vectors used for corporate identity theft