book

Network Security Strategies

Name: Network Security Strategies
Author: Aditya Mukherjee
ISBN: 9781789806298

by Aditya Mukherjee

November 2020

Intermediate to advanced

390 pages

8h 17m

English

Packt Publishing

Read now

Unlock full access

Title Page
Copyright and Credits
Network Security Strategies
About Packt
Why subscribe?
Contributors
About the authorAbout the reviewerPackt is searching for authors like you
Preface
Who this book is forWhat this book coversTo get the most out of this bookDownload the color imagesConventions usedGet in touchReviews
Section 1: Network Security Concepts, Threats, and Vulnerabilities
Network Security Concepts
Technical requirementsAn overview of network securityNetwork security conceptsNetwork security componentsNetwork and system hardeningNetwork segmentationNetwork choke-pointsDefense-in-DepthDue diligence and cyber resilienceSoft targetsContinuous monitoring and improvementPost-deployment reviewNetwork security architecture approachPlanning and analysisDesigningBuildingTestingDeploymentPost-deploymentNetwork security best practices and guidelinesNetwork Operations Center overviewProper incident managementFunctional ticketing system and knowledge baseMonitoring policyA well-defined investigation processReporting and dashboardsEscalationHigh availability and failoverAssessing network security effectivenessKey attributes to be consideredThe action priority matrixThreat modelingAssessing the nature of threatsSTRIDEPASTATrikeVASTOCTAVESummaryQuestionsFurther reading
Security for Cloud and Wireless Networks
Technical requirementsAn introduction to secure cloud computingAWS' shared responsibility modelMajor cybersecurity challenges with the cloudAmazon Web Services (AWS)AWS security featuresWell-defined identity capabilitiesTraceabilityDefense in depthAutomation of security best practicesContinuous data protectionSecurity event responseMicrosoft Azure security technologiesThe Zero Trust modelSecurity layersIdentity management using AzureInfrastructure protection using AzureCriticality of infrastructureEncryptionIdentifying and classifying dataEncryption on AzureNetwork securityInternet protectionVirtual networksNetwork integrationsCipherCloudSecuring cloud computingSecurity threatsCountermeasuresWireless network securityWi-Fi attack surface analysis and exploitation techniquesWi-Fi data collection and analysisWi-Fi attack and exploitation techniques Best practicesSecurity assessment approachSoftware-defined radio attacksTypes of radio attacksReplay attacksCryptanalysis attacksReconnaissance attacksMitigation techniquesSummaryQuestionsFurther reading
Mitigating the Top Network Threats of 2020
Technical requirementsThe top 10 network attacks and how to fix themPhishing – the familiar foeHow to fix phishing threatsRogue applications and fake security alerts – intimidation and imitationHow to fix rogue applications and software threatsInsider threats – the enemy inside the gatesHow to fix insider threatsViruses and worms – a prevailing peril How to fix viruses and worms threatsBotnets – an adversarial army at disposalHow to fix botnet threatsTrojan horse – covert entry How to fix trojan threatsRootkit – clandestine malicious applicationsHow to fix rootkit threatsMalvertising – ads of chaosHow to fix malvertising threats DDoS – defending against one too manyHow to fix DDoS threatsRansomware – cyber extortions How to fix ransomware threatsNotable mentionsDrive-by downloadExploit kits and AI-ML-driven attacksThird-party and supply chain attacksCreating an integrated threat defense architectureKeeping up with vulnerabilities and threatsUnderstanding various defense mechanisms Safeguarding confidential information from third partiesImplementing strong password policiesEnhancing email securityVulnerability management policiesVulnerability management life cycleNetwork vulnerability assessmentsUtilizing scanning tools in vulnerability assessmentExercising continuous monitoringThe NIST Risk Management FrameworkThe NIST Release Special Publication 800-37SummaryQuestionsFurther reading
Section 2: Network Security Testing and Auditing

Network Penetration Testing and Best Practices
Technical requirementsApproach to network penetration testingPre-engagementReconnaissanceThreat modelingExploitationPost-exploitationReportingRetestingTop penetration testing platformsSetting up our networkPerforming automated exploitationOpenVasSparta ArmitagePerforming manual exploitationKali LinuxNmapNiktoDirbMetasploitBrowser Exploitation Framework (BeEF)Burp SuitePenetration testing best practicesCase studyInformation gatheringScanning the serversIdentifying and exploiting vulnerabilitiesReportingPresentationA few other practicesThe concept of teamingRed teamBlue teamPurple teamCapture the flagEngagement models and methodologiesBlack boxGray boxWhite boxSummaryQuestionsFurther reading
Advanced Network Attacks
Technical requirementsCritical infrastructure and prominent exploitation Attack frameworks toward ICS industriesThe cyber kill chainInformation sharing and analysis centersUnderstanding the threat landscapeTop threats and vulnerable points in ICS industriesWell-known critical infrastructure exploitation examplesPenetration testing IoT networks and reverse engineering firmwareIntroduction to IoT network securitySecurity challenges for IoTPenetration testing for IoT networksReconnaissance EvaluationExploitationReportingSetting up an IoT pen testing labSoftware tool requirementsFirmware software toolsWeb application software toolsPlatforms and tools for advanced testingUART communicationFirmware reverse engineering and exploitationExploiting VoIP networks and defense mechanismsVoIP threat landscapeVoIP phone classificationsPros and cons of VoIPAnalyzing VoIP security issuesVishingDenial of Service (DoS)EavesdroppingCountermeasures and defense vectorsTop platforms for VoIP monitoring and securitySummaryQuestionsFurther reading
Network Digital Forensics
Technical requirementsConcepts of network forensicsFundamentals of network forensicsTechnical capabilities for responding to forensic incidentsNetwork protocols and communication layersDamballa network threat analysis Forensics tools – network analysis and responseWiresharkThe NIKSUN SuiteSecurity OnionXplicoNetworkMinerHakabanaNetWitness NextGenSolera Networks DSDSHELLLogRhythm Network MonitorKey approaches to network forensicsIndustry best practices and standardsThe four steps to dealing with digital evidenceAdvances in network forensics practicesBig data analytics-based forensicsConducting a tabletop forensics exerciseFamiliarizing yourself with the stakeholdersCreating the ideal scenarioGamificationDocument lessons learnedSummaryQuestionsFurther reading
Performing Network Auditing
Technical requirementsGetting started with your auditWhat is a network audit?Why do we need a network audit?Key concepts of network auditingUnderstanding the fundamentals of an auditUnderstanding the types of auditsFoundational pillars for network auditsPolicyProceduresStandardsControlsRisk management in a network auditRisk assessmentRisk management strategiesIndustry standards and governance frameworkUnderstanding the auditor's roleUnderstanding the auditing processPerforming a network security auditPlanning and research phaseData gathering and data analysis phaseAudit report and follow-up phaseExploring network audit toolsNetwork assessment and auditing toolsSolarWindsOpen-AudITNmapNetformXSecurity assessment tools NessusNipperWiresharkNetwork audit checklistComprehensive checklistPlanning phaseDesign and architecture reviewPhysical inventoryNetwork infrastructure securityInfrastructure for monitoring and managementConfiguration managementPerformance monitoring and analysisDocumentationCase studyNetwork monitoring checklistNOC audit checklistAudit report (sampling)Auditing best practices and latest trends Best practicesLatest trendsSolarWinds Network Automation Manager SolarWinds NCMTrueSight Network AutomationSummaryQuestionsFurther reading
Section 3: Threat Management and Proactive Security Operations
Continuous and Effective Threat Management
Technical requirementsCyber threat management conceptsBCP/DRCyber risk assessmentStrategic governance frameworkCyber resilienceGovernance, risk, and compliance (GRC)Cyber perimeter establishmentThreat intelligence gatheringContinuous threat monitoring Actively managing risks and threatsUnified threat management (UTM)Advanced persistent threats (APT)The essential eightMalware analysisMalware analysis processMalware analysis lab – overviewSetting up a malware analysis labProposed malware analysis lab architectureCreating an isolated virtual networkCreating and restoring snapshotsEndpoint detection and response (EDR)Vulnerability and patch managementThreat management best practicesAddressing security leadership concerns Conveying risk and threat management to leadershipStrategies for boardroom discussionsCybersecurity and business outcomesSummaryQuestionsFurther reading
Proactive Security Strategies
Technical requirementsAdvancing to proactive securityKey considerationsEvolving security challengesSteps to building a proactive security systemUnderstanding how threat intelligence worksThreat intelligence platformsFireEye iSIGHTIBM's X-Force ExchangeIntSights's Enterprise Threat Intelligence and Mitigation PlatformDigital Shadows SearchLightUnderstanding how threat hunting worksStages of threat huntingComponents of threat huntingDeveloping a threat hunting planThreat hunting maturity modelThreat hunting platforms MITRE FrameworkEndgame threat huntingCybereasonUnderstanding deception technologyNeed for deception technologyDeception technology vendors and platforms Illusive NetworksAttivo NetworksSmokescreen IllusionBLACK DeceptionTrapX SecuritySecurity Information and Event Management (SIEM)Capabilities of SIEMSIEM platformsSplunkArcSight Enterprise Security ManagerIBM QRadarELK SIEMAlienVault OSSIMSummaryQuestionsFurther reading
Assessments
Chapter 1Chapter 2Chapter 3Chapter 4Chapter 5Chapter 6Chapter 7Chapter 8Chapter 9
Other Books You May Enjoy
Leave a review - let other readers know what you think

Content preview from Network Security Strategies

Network Digital Forensics

Network forensics is the process of looking at network artifacts to determine whether any unauthorized activity has taken place, as well as retrieving artifacts and evidence to prove it. This includes, but is not limited to, network monitoring, network recording, and active/passive analysis of network traffic and events for correlation. Analysts can use these techniques to uncover the origins of security events and perform root cause analysis.

The idea behind a strong forensics practice is to enable the blue team to improve their detection techniques and have better understanding and visibility throughout the network. In this chapter, we will look at how to perform network forensics and learn how to utilize these ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Network and Data Security for Non-Engineers

Publisher Resources

ISBN: 9781789806298

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Network Security Strategies

by Aditya Mukherjee

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.