Title page
by Ed Brindley, Aaron W Bayles, Johnny Long, Chris Hurley
InfoSec Career Hacking: Sell Your Skillz, Not Your Soul
- Cover image
- Title page
- Table of Contents
- Copyright
- Acknowledgments
- Author Dedication
- Lead Author and Technical Editor
- Contributing Authors
- Technical Reviewer
- Foreword Contributor
- Foreword
- Part I: Recon/Assessment
- Part II: Technical Skills
- Chapter 5: The Laws of Security
- Introduction
- Knowing the Laws of Security
- Client-Side Security Doesn’t Work
- You Cannot Securely Exchange Encryption Keys without a Shared Piece of Information
- Malicious Code Cannot Be 100 Percent Protected against
- Any Malicious Code Can Be Completely Morphed to Bypass Signature Detection
- Firewalls Cannot Protect You 100 Percent from Attack
- Any IDS Can Be Evaded
- Secret Cryptographic Algorithms Are Not Secure
- If a Key Is Not Required, You Do Not Have Encryption—You Have Encoding
- Passwords Cannot Be Securely Stored on the Client Unless There Is Another Password to Protect Them
- In Order for a System to Begin to Be Considered Secure, It Must Undergo an Independent Security Audit
- Security through Obscurity Does Not Work
- Summary
- Solutions Fast Track
- Frequently Asked Questions
- Chapter 6: No Place Like/home—Creating an Attack Lab
- Chapter 7: Vulnerability Disclosure
- Introduction
- Vulnerability Disclosure and Cyber Adversaries
- “Free For All”: Full Disclosure
- Unfixed Vulnerability Attack Capability and Attack Inhibition Considerations
- Probability of Success Given an Attempt
- Probability of Detection Given an Attempt
- “Symmetric” Full Disclosure
- Responsible Restricted “Need to Know” Disclosure
- Responsible, Partial Disclosure and Attack Inhibition Considerations
- “Responsible” Full Disclosure
- Responsible, Full Disclosure Capability and Attack Inhibition Considerations
- Security Firm “Value Added” Disclosure Model
- Value-Add Disclosure Model Capability and Attack Inhibition Considerations
- Non-Disclosure
- The Vulnerability Disclosure Pyramid Metric
- Pyramid Metric Capability and Attack Inhibition
- Pyramid Metric and Capability—A Composite Picture Pyramid
- Comparison of Mean Inhibitor Object Element Values
- The Disclosure Food Chain
- Summary
- Frequently Asked Questions
- Chapter 8: Classes of Attack
- Chapter 5: The Laws of Security
- Part III: On the Job
- Index
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.