Book description
Discover how poor identity and privilege management can be leveraged to compromise accounts and credentials within an organization. Learn how role-based identity assignments, entitlements, and auditing strategies can be implemented to mitigate the threats leveraging accounts and identities and how to manage compliance for regulatory initiatives.
As a solution, Identity Access Management (IAM) has emerged as the cornerstone of enterprise security. Managing accounts, credentials, roles, certification, and attestation reporting for all resources is now a security and compliance mandate. When identity theft and poor identity management is leveraged as an attack vector, risk and vulnerabilities increase exponentially. As cyber attacks continue to increase in volume and sophistication, it is not a matter of if, but when, your organization will have an incident. Threat actors target accounts, users, and their associated identities, to conduct their malicious activities through privileged attacks and asset vulnerabilities.Identity Attack Vectors details the risks associated with poor identity management practices, the techniques that threat actors and insiders leverage, and the operational best practices that organizations should adopt to protect against identity theft and account compromises, and to develop an effective identity governance program.
What You Will Learn
- Understand the concepts behind an identity and how their associated credentials and accounts can be leveraged as an attack vector
- Implement an effective Identity Access Management (IAM) program to manage identities and roles, and provide certification for regulatory compliance
- See where identity management controls play a part of the cyber kill chain and how privileges should be managed as a potential weak link
- Build upon industry standards to integrate key identity management technologies into a corporate ecosystem
- Plan for a successful deployment, implementation scope, measurable risk reduction, auditing and discovery, regulatory reporting, and oversight based on real-world strategies to prevent identity attack vectors
Who This Book Is For
Management and implementers in IT operations, security, and auditing looking to understand and implement an identity access management program and manage privileges in these environments
Table of contents
- Cover
- Front Matter
- 1. The Three Pillars of Cybersecurity
- 2. A Nuance on Lateral Movement
- 3. The Five A’s of Enterprise IAM
- 4. Understanding Enterprise Identity
- 5. Bots
- 6. Identity Governance Defined
- 7. The Identity Governance Process
- 8. Meeting Regulatory Compliance Mandates
- 9. Indicators of Compromise
- 10. Identity Attack Vectors
- 11. Identity Management Controls in the Cyber Kill Chain
- 12. Identity Management Program Planning
- 13. Privileged Access Management
- 14. Just-in-Time Access Management
- 15. Identity Obfuscation
- 16. System for Cross-Domain Identity Management (SCIM)
- 17. Remote Access
- 18. Identity-Based Threat Response
- 19. Biometric Risks Related to Identities
- 20. Blockchain and Identity Management
- 21. Conclusion
- Back Matter
Product information
- Title: Identity Attack Vectors: Implementing an Effective Identity and Access Management Solution
- Author(s):
- Release date: December 2019
- Publisher(s): Apress
- ISBN: 9781484251652
You might also like
book
Web Application Security
While many resources for network and IT security are available, detailed knowledge regarding modern web application …
book
Cybersecurity Incident Response: How to Contain, Eradicate, and Recover from Incidents
Create, maintain, and manage a continual cybersecurity incident response program using the practical steps presented in …
book
Web Application Security, 2nd Edition
In the first edition of this critically acclaimed book, Andrew Hoffman defined the three pillars of …
book
Access Control and Identity Management, 3rd Edition
Revised and updated with the latest data from this fast paced field, Access Control, Authentication, and …