book

How Cybersecurity Really Works

Name: How Cybersecurity Really Works
Author: Sam Grubb
ISBN: 9781718501287

by Sam Grubb

June 2021

Beginner

216 pages

6h 35m

English

No Starch Press

Read now

Unlock full access

Title Page
Copyright
Dedication
About the Author
Preface
A Note on the Book’s ExercisesWho This Book Is ForWhat’s in the Book?
ACKNOWLEDGMENTS
Chapter 1: An Introduction to Cybersecurity
What Is Cybersecurity? Cybersecurity and Privacy What Cybersecurity Isn’t Black Hats vs. White HatsTypes of Black Hats Types of White Hats Exercise: Learning More About Cybersecurity and Threats Conclusion
Chapter 2: Attack Targets on the Internet
How the Internet WorksTCP/IP: The Backbone of the Internet Public vs. Private NetworksHow the Internet Looks to a Black Hat The Black Hat Attack Methodology Reconnaissance WeaponizationDelivery Exploitation and InstallationCommand and Control, and Attack on Objectives How Black Hats Find YouExample 1: The Merger Example 2: Social Media Hunting How to Hide from Black HatsThe Internet Is Open The Internet Is PublicThe Internet Is Forever Exercise: Analyzing Your Network Network Command Line Tools Using Shodan Conclusion
Chapter 3: Phishing Tactics
What Is Phishing?An Obvious PhishNot All Phishing Is Obvious Using Details for a More Convincing PhishVishing and Other Non-Email PhishingHow to Protect Yourself Against PhishingHow Black Hats Trick You with URLsTyposquattingComplex URLs and RedirectsModifying DNS RecordsHoaxesWhy Black Hats Love PhishingThink Twice to Avoid PhishingTake an Alternate RouteListen to Your Spidey Sense Exercise: Analyzing a Phishing EmailPhishing Email IndicatorsHeader AnalysisURL AnalysisConclusion
Chapter 4: Malware Infections
What Is Malware? Types of MalwareVirusesWormsTrojans Ransomware Spyware and Adware Rootkits and BootkitsPolymorphic Malware How Black Hats Deploy MalwareHow to Defend Against MalwareExercise: Analyzing Malware and Managing Antivirus SettingsAnalyzing Malware in Attachments Reviewing Antivirus SettingsConclusion

Chapter 5: Password Thefts and Other Account Access Tricks
AuthenticationTypes of Authentication Multi-Factor Authentication Authorization Mandatory Access ControlRule-Based Access Control Role-Based Access Control Attribute-Based Access Control Discretionary Access ControlAccounting Logging AuditingIndicators of AttackExercise: Setting Up Accounts in Windows 10 and macOSWindows 10 Access Control on macOSConclusion
Chapter 6: Network Tapping
The Basics of Network Design Attacking Your Network How Black Hats See Your Traffic Man-in-the-Middle AttacksDenial of Service Distributed Denial of ServiceDefense Against Network AttacksFirewalls Intrusion Detection Systems Intrusion Prevention SystemsExercise: Setting Up Your Firewall WindowsmacOSConclusion
Chapter 7: Attacks in the Cloud
How Cloud Computing Works Software as a Service Platform as a ServiceInfrastructure as a Service Security as a Service Attacking the CloudWeb Application AttacksDefending the CloudExercise: Performing SQL Injection on the Damn Vulnerable Web ApplicationInstalling Docker and the DVWAListing UsersFinding Database Table NamesFinding PasswordsConclusion
Chapter 8: Wireless Network Pirating
How Wireless Networks WorkWireless Standards Wireless SecurityWireless Authentication Wireless Encryption Wireless Attacks Rogue Access Points Disassociation AttacksJamming Setting Up a Wireless Network with Security in MindExercise: Secure Your WAPSetting Up Your Access PointSetting Up Wireless Security Enabling Filtering Conclusion
Chapter 9: Encryption Cracking
What Is Cryptography?What We EncryptEarly CryptographySubstitution CiphersTransposition CiphersModern CryptographySymmetric CryptographyAsymmetric CryptographyValidating Public KeysHashingWhat Happens When You Visit a Website?How Black Hats Steal Your KeysCryptanalysisAsymmetric Algorithm Attacks Protecting Your Keys How Black Hats Break HashesSalting Your HashesExercise: Encrypting and Hashing FilesEncrypting and Hashing a File in Windows 10 Protecting Files Using macOSUsing ssh-keygen to Generate a Public Key (Windows 10 or macOS)Conclusion
Chapter 10: How to Defeat Black Hats
What’s the Worst That Could Happen? RisksThreatsControlsRisk Management Programs Putting It All TogetherExercise: Conducting a Risk AnalysisFarewell and Good Luck
Index

Content preview from How Cybersecurity Really Works

5 Password Thefts and Other Account Access Tricks

We use access control procedures to ensure that only authorized people can access a system, open a file, or run a piece of software. It’s part of an organization’s everyday management; every person who works for a business deals with it in some form or fashion, whether by logging into an email account or sharing a file with a client. To better manage such a sizable and critical topic, the security world often divides access control into three categories: authentication, authorization, and accounting.

In this chapter, we’ll explore how various methods of authentication and authorization can ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9781098128999

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

How Cybersecurity Really Works

by Sam Grubb

5 Password Thefts and Other Account Access Tricks

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.