book

Preventing Good People from Doing Bad Things: Implementing Least Privilege

Name: Preventing Good People from Doing Bad Things: Implementing Least Privilege
ISBN: 9781430239215

by John Mutch, Brian Anderson

October 2011

Intermediate to advanced

218 pages

5h 39m

English

Apress

Read now

Unlock full access

Title
Dedication
Contents
About the Authors
Acknowledgments
Introduction
Chapter 1: The Only IT Constant Is Change
Internal vs. External ThreatsPrivileged Identity Management DemystifiedPriv·i·leged i·den·ti·tyPrivileged Accounts are Pervasive and ProblematicPeople Need Boundaries, Not WallsTop 10 Reasons to Care About Who Has Privileged Access to Your ITFederal Mandates for Least PrivilegeThe Yin and Yang of SecurityWhat To Expect NextInsiders Examined: The VillainsInsiders Examined: The HeroesIT Infrastructure Requirements ExaminedCompliance and Governance Requirements ExaminedHard and Soft Costs of Apathy ExaminedFinal Observations and Best Practices ExaminedWeighing-In
Chapter 2: Misuse of Privilege Is the New Corporate Landmine
Disgruntled Dave Examined CloserAccident Prone Annie Examined CloserMore Insider Breaches in the NewsIdentity Thief Irene Examined CloserWhat Hackers Don't Want You To Know About User PrivilegesTop Five Excuses for Data Breaches and What They Really MeanHR and IT—How Security Can Make For Strange BedfellowsPerhaps It's Time to “Geek Up” HRTop Ten Reasons Good People Do Bad Things Without Least PrivilegeWeighing In
Chapter 3: Business Executives, Technologists, and Auditors Need Least Privilege
Secure Sam Examined CloserLeast Privilege Lucy Examined CloserCompliance Carl Examined CloserThe Problem Still Exists Between the Keyboard and ChairThe Swiss Cheese ModelSecurity Is a Team Sport and Least Privilege Is the Team MottoWeighing In
Chapter 4: Supplementing Group Policy on Windows Desktops
Six Things You Should Know Before Migrating to MS Windows 7Things You Should Know About MS UACThings You Should Know About MS AppLockerTop Ten Reasons to Implement Least Privilege on Windows DesktopsThe “Do-Nothing” ApproachImpact on the Help DeskMicrosoft Published VulnerabilitiesThe Wild WestSurvey Results Validate ProblemLeast Privilege, Architecturally SpeakingPutting Least Privilege into PracticeDesktop Least Privilege in ProductionUnpredictable EnvironmentsWeighing In

Chapter 5: Servers Are the Primary Target for Insiders and Hackers Alike
Servers Store the Good StuffServer Breaches in the NewsBlack Market for Server DataThe Architecture of Server Least PrivilegeOf WikiLeaks and ServersWikiLeaks and WikiWarWhy Do You Sudo the Way You Do?Top Ten Reasons to Implement Least Privilege on UNIX and Linux ServersMore Server Breaches in the NewsCase Study: Replacing Sudo in a Production EnvironmentVulnerability Scanning Requires Least PrivilegePatching Needs Least PrivilegePrivilege Identity Management System Logs Help Spot Other Security WeaknessesWeighing In
Chapter 6: Protecting Virtual Environments from Hypervisor Sabotage
Virtual TheftDesktop VirtualizationDesktop Registry and File System VirtualizationThe Virtual Shell GameControlling Virtual Sprawl with Least PrivilegeTop Ten Reasons to Implement Least Privilege for Virtualized ServersRole-Based Access ControlRBAC Is Not the Same as ACLsToo Much Trust?Least Privilege Architecturally Defined for Virtualized EnvironmentsVirtualized Least Privilege ValueWeighing-In
Chapter 7: Secure Multi-Tenancy for Private, Public, and Hybrid Clouds
All Clouds Are Not Created EqualThe Elusive UnicornTop Ten Reasons to Implement Least Privilege For Private, Public & Hybrid CloudsIs the Cloud Inherently Secure or Insecure?Who's in Charge of Cloud Security?To the Cloud, or NotSecurity in Public CloudsTrusted Digital IdentitiesPublic Clouds Need Least PrivilegeA Rose by Any Other NameCase Study: Secure Multi-Tenancy in a Private CloudLogs in the CloudImplementing Least Privilege in the CloudWeighing In
Chapter 8: Applications, Databases, and Desktop Data Need Least Privilege, Too
Servers Store the Good Stuff…In DatabasesDBA: The Privileged Database UserDatabase Security RisksLegacy Applications Are Still PervasiveDesktops Have Legacy Application Challenges as WellDesktop DLP Helps Mitigate Different Insider ThreatsCompliance Audit FailuresStolen FruitTop Ten Reasons to Implement Least Privilege for Applications and DatabasesIn the NewsWhy Give a DAMDAM ValueImplementing Least Privilege for DatabasesControlling Your Privileged Database UsersWeighing In
Chapter 9: Security Does Not Equal Compliance
GRC DemystifiedGovernanceRiskCompliance: The Big CCase Study: Using Least Privilege to Meet ComplianceThe Demand of Compliance Versus the Ease of Open SourceWalk on the Wild Side of a Failed AuditCase Study: Satisfying Auditing ChallengesBalancing Security, Productivity, and ComplianceThe Tradeoffs Between Security and ProductivityWeighing In
Chapter 10: The Hard and Soft Cost of Apathy
Lessons from Jérôme KervielCyber Crime Can Be LucrativeHow Much Is Your Code Worth?Lessons from Matt MiszewskiOne in 14 Can Cost You $129 Without Least PrivilegeWho's To Blame?Hard Versus Soft CostsThe Soft Cost of Identity BreachesCase Study: Saving Help-Desk CostsTrust Alone Is Not an OptionCalculating Your ROI for Least PrivilegeCost-Justifying Least PrivilegeWeighing In
Chapter 11: Final Thoughts for Least Privilege Best Practices
Intent Versus ActionInsider Threats Aren't Perpetrated By the ObviousPreventing Security StormsBad Habits to Kick for IT SecurityBalance Security and ProductivityCase Study: University Finds BalancePasswords Authenticate for Least PrivilegeImplement Least Privilege Now Not LaterWeighing In
Works Cited
Chapter 1Chapter 2Chapter 3Chapter 4Chapter 5Chapter 6Chapter 7Chapter 8Chapter 9Chapter 10Chapter 11
Index

Content preview from Preventing Good People from Doing Bad Things: Implementing Least Privilege

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9781430239215Purchase book

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Preventing Good People from Doing Bad Things: Implementing Least Privilege

by John Mutch, Brian Anderson

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.