Practical Threat Intelligence and Data-Driven Threat Hunting

A hands-on guide to threat hunting with the ATT&CKTM Framework and open source tools

Valentina Costa-Gazcón

Get to grips with cyber threat intelligence and data-driven threat hunting while exploring expert tips and techniques Key Features Set up an environment to centralize all data in an Elasticsearch, Logstash, and Kibana (ELK) server that enables threat hunting Carry out atomic hunts to start the threat hunting process and understand the environment Perform advanced hunting using MITRE ATT&CK Evals emulations and Mordor datasets Book DescriptionThreat hunting (TH) provides cybersecurity analysts and enterprises with the opportunity to proactively defend themselves by getting ahead of threats before they can cause major damage to their business. This book is not only an introduction for those who don’t know much about the cyber threat intelligence (CTI) and TH world, but also a guide for those with more advanced knowledge of other cybersecurity fields who are looking to implement a TH program from scratch. You will start by exploring what threat intelligence is and how it can be used to detect and prevent cyber threats. As you progress, you’ll learn how to collect data, along with understanding it by developing data models. The book will also show you how to set up an environment for TH using open source tools. Later, you will focus on how to plan a hunt with practical examples, before going on to explore the MITRE ATT&CK framework. By the end of this book, you’ll have the skills you need to be able to carry out effective hunts in your own environment.What you will learn Understand what CTI is, its key concepts, and how it is useful for preventing threats and protecting your organization Explore the different stages of the TH process Model the data collected and understand how to document the findings Simulate threat actor activity in a lab environment Use the information collected to detect breaches and validate the results of your queries Use documentation and strategies to communicate processes to senior management and the wider business Who this book is for If you are looking to start out in the cyber intelligence and threat hunting domains and want to know more about how to implement a threat hunting division with open-source tools, then this cyber threat intelligence book is for you.

The Art of Computer Virus Research and Defense

Peter Szor

A guide to computer viruses covers such topics as virus behavior, malware, technical defenses, and worm blocking.

Inside Cyber Warfare

Mapping the Cyber Underworld

Jeffrey Carr

What people are saying about Inside Cyber Warfare "The necessary handbook for the 21st century." --Lewis Shepherd, Chief Tech Officer and Senior Fellow, Microsoft Institute for Advanced Technology in Governments "A must-read for policy makers and leaders who need to understand the big-picture landscape of cyber war." --Jim Stogdill, CTO, Mission Services Accenture You may have heard about "cyber warfare" in the news, but do you really know what it is? This book provides fascinating and disturbing details on how nations, groups, and individuals throughout the world are using the Internet as an attack platform to gain military, political, and economic advantages over their adversaries. You'll learn how sophisticated hackers working on behalf of states or organized crime patiently play a high-stakes game that could target anyone, regardless of affiliation or nationality. Inside Cyber Warfare goes beyond the headlines of attention-grabbing DDoS attacks and takes a deep look inside multiple cyber-conflicts that occurred from 2002 through summer 2009. Learn how cyber attacks are waged in open conflicts, including recent hostilities between Russia and Georgia, and Israel and Palestine Discover why Twitter, Facebook, LiveJournal, Vkontakte, and other sites on the social web are mined by the intelligence services of many nations Read about China's commitment to penetrate the networks of its technologically superior adversaries as a matter of national survival Find out why many attacks originate from servers in the United States, and who's responsible Learn how hackers are "weaponizing" malware to attack vulnerabilities at the application level

Digital Evidence and Computer Crime

Eoghan Casey

Required reading for anyone involved in computer investigations or computer administration!

Digital Evidence and Computer Crime

Forensic Science, Computers, and the Internet

Eoghan Casey

Though an increasing number of criminals are using computers and computer networks, few investigators are well versed in the issues related to digital evidence. This work explains how computer networks function and how they can be used in a crime.

Building Secure and Reliable Systems

Best Practices for Designing, Implementing, and Maintaining Systems

Heather Adkins, Betsy Beyer, Paul Blankinship, Piotr Lewandowski, Ana Oprea, Adam Stubblefield

Can a system be considered truly reliable if it isn't fundamentally secure? Or can it be considered secure if it's unreliable? Security is crucial to the design and operation of scalable systems in production, as it plays an important part in product quality, performance, and availability. In this book, experts from Google share best practices to help your organization design scalable and reliable systems that are fundamentally secure. Two previous O’Reilly books from Google—Site Reliability Engineering and The Site Reliability Workbook—demonstrated how and why a commitment to the entire service lifecycle enables organizations to successfully build, deploy, monitor, and maintain software systems. In this latest guide, the authors offer insights into system design, implementation, and maintenance from practitioners who specialize in security and reliability. They also discuss how building and adopting their recommended best practices requires a culture that’s supportive of such change. You’ll learn about secure and reliable systems through: Design strategies Recommendations for coding, testing, and debugging practices Strategies to prepare for, respond to, and recover from incidents Cultural best practices that help teams across your organization collaborate effectively

No Room for Bullies

From the Classroom to Cyberspace

Jose Bolton, Stan Graeve

No Room for Bullies: From the Classroom to Cyberspace shatters popular myths about bullying to reveal its stark realities. You'll learn who's playing the intimidation game, and how they play it. From social exclusion, physical violence, and emotional backstabbing to sexual sleaze and cyberbullying. But this book takes you beyond problem recognition to proven solutions.Parents will find:*How to advocate for a child and work with the school when school bullying is a problem*Safe Internet-Surfing Contract for kids that lays down the law on Internet use at home*Helpful strategies on what to do when a child acts like a bully, is a bullying victim, or suffers from "bystander silence"School administrators will find:*Suggestions on how to measure the social climate of schools, including sample surveys to give to students, staff, and parents*A 12-point checklist on preventing problems in hallways, classrooms, and common areasTeachers will find:*Advice for creating and enforcing classroom rules, including an "Airport Rule" that gives students a sense of safety *Ideas to minimize the chaos that occurs during passing periods and in "unowned" areas like restrooms and hallwaysThe contributing authors include child psychologists, parent trainers, and teachers. Drawing on their years of experience, they tackle bullying from all the angles: the bully, the victim, the bystander, the teacher, the parent, and the environment.

Practical UNIX and Internet Security

Simson Garfinkel, Gene Spafford, Alan Schwartz

The definitive book on UNIX security, this volume covers every aspect of computer security on UNIX machines and the Internet.

Black Ice

The Invisible Threat of Cyber-terrorism

Dan Verton

Internet security expert Verton investigates how cyber-terrorism could occur, what the global and financial implications are, the impact this is having and will continue to have on privacy and civil liberties, and how to prepare and prevent against cyber-terrorism.

Cybercrime and the Darknet

Revealing the hidden underworld of the internet

Cath Senker

With the emergence of the internet new forms of crime became possible. From harassment and grooming to fraud and identity theft the anonymity provided by the internet has created a new world of crime of which we all must be aware. The threat of hackers reaches beyond the individual, threatening businesses and even states, and holds worrying implications for the world we live in. In this enlightening account, Cath Senker unmasks the many guises that cybercrime takes and the efforts of law enforcement to keep pace with the hackers. She reveals the mysterious world of hackers and cybersecurity professionals and reveals a story that is both shocking and surprising. With chapters on political activism and human rights, Senker shows a brighter side of the darknet. For anyone interested in learning more of the world of cyber-criminals and their opponents, this is the perfect starting point.

Computer Security Basics

Rick Lehtinen, Deborah Russell, G. T. Gangemi (Sr)

This new edition of a well-established handbook describes complicated concepts such as trusted systems, encryption, and mandatory access control in simple terms. It tells users what they need to know to understand the basics of computer security.

The Ethics of Cybersecurity

Markus Christen, Bert Gordijn, Michele Loi

This open access book provides the first comprehensive collection of papers that provide an integrative view on cybersecurity. It discusses theories, problems and solutions on the relevant ethical issues involved. This work is sorely needed in a world where cybersecurity has become indispensable to protect trust and confidence in the digital infrastructure whilst respecting fundamental values like equality, fairness, freedom, or privacy. The book has a strong practical focus as it includes case studies outlining ethical issues in cybersecurity and presenting guidelines and other measures to tackle those issues. It is thus not only relevant for academics but also for practitioners in cybersecurity such as providers of security software, governmental CERTs or Chief Security Officers in companies.

Bullying Beyond the Schoolyard

Preventing and Responding to Cyberbullying

Sameer Hinduja, Justin W. Patchin

Proactive guidelines to help identify cyberbullying warning signs and prevent inappropriate behaviors! Focusing on the kinds of hurtful behaviors youth may experience online, this resource provides educators with information, guidelines, and resources to identify and respond effectively to cyberbullying and give students the protection they need. This groundbreaking book by two of the leading experts in the field offers the personal voices of youth affected by, or involved in, cyberbullying incidents and includes: Illustrations of what cyberbullying looks like Tips for identifying cyberbullies or targets ′Breakout Boxes′ highlighting hundreds of anti-cyberbullying strategies A review of the latest research and important legal rulings Strategies for responsible social networking Strategies for working with parents and law enforcement

The Cybersecurity Dilemma

Hacking, Trust, and Fear Between Nations

Ben Buchanan

This book examines how cyber conflict could happen--even if no nation desires it. It applies the security dilemma, a long-standing idea in international relations, to cybersecurity. Drawing on a detailed analysis of leaked classified documents and cybersecurity forensic reports, this book shows how nations' methods of defending themselves in other states risk unintentionally threatening other nations and risking escalation.

Cyberbullying Prevention and Response

Expert Perspectives

Justin W. Patchin, Sameer Hinduja

Just as the previous generation was raised in front of televisions, adolescents at the turn of the 21st century are being raised in an internet-enabled world where blogs, social networking, and instant messaging are competing with face-to-face and telephone communication as the dominant means through which personal interaction takes place. Unfortunately, a small but growing proportion of our youth are being exposed online to interpersonal violence, aggression, and harassment via cyberbullying. The mission of this book is to explore the many critical issues surrounding this new phenomenon. Key features include the following. Comprehensive – The book provides a comprehensive, up-to-date look at the major issues that teachers, school administrators, counsellors, social workers, and parents need to be aware of with respect to cyberbullying identification, prevention, and response. Practical – While the information is informed by research, it is written in an accessible way that all adults will be able to understand and apply. Expertise – Justin W. Patchin and Sameer Hinduja are Co-Directors of the Cyberbullying Research Center (www.cyberbullying.us). Chapter authors represent a carefully selected group of contributors who have demonstrated both topical expertise and an ability to write about the topic in clear, easily accessible language. This book is appropriate for teachers, administrators, parents and others seeking research-based guidance on how to deal with the rising tide of cyberbullying issues. It is also appropriate for a variety of college level courses dealing with school violence and educational administration.

Protect Yourself Online

How to Cover Your Assets Every Time You Log On

David Chappelle

Typical media may have you thinking that as soon as you log on to the Internet a horde of virus writers, pornographers, bomb makers, mass marketers, and identity thieves will pounce on you. Of course the reality is very different from what the media portrays. While potential dangers exist, most are mere annoyances. You're more likely to encounter grief elsewhere. A few simple preventative measures will make your online experiences more enjoyable, and safer. This easy to read book explains computer security in simple terms. A few things you'll learn: Various ways to secure your computer. Simple ways to prevent unauthorized access of your files. How to prevent unauthorized gathering of your surfing records. FREE methods of keeping hackers out of your system. About protecting your children when they surf the Internet. Of programs that track everything done on a computer, without the owner knowing! How corporations follow you online, and How to STOP them from following you! The way you address your email may be helping someone else's illegal activity. How to keep your email address private. Ways to prevent others from changing your settings. Common security terms explained in plain language. To order over the telephone please contact us toll-free at 1-888-232-4444 Visit www.protectyourselfonline.com for more information!

No Place to Hide

Edward Snowden, the NSA, and the U.S. Surveillance State

Glenn Greenwald

A groundbreaking look at the NSA surveillance scandal, from the reporter who broke the story, Glenn Greenwald, star of Citizenfour, the Academy Award-winning documentary on Edward Snowden In May 2013, Glenn Greenwald set out for Hong Kong to meet an anonymous source who claimed to have astonishing evidence of pervasive government spying and insisted on communicating only through heavily encrypted channels. That source turned out to be the 29-year-old NSA contractor and whistleblower Edward Snowden, and his revelations about the agency's widespread, systemic overreach proved to be some of the most explosive and consequential news in recent history, triggering a fierce debate over national security and information privacy. As the arguments rage on and the government considers various proposals for reform, it is clear that we have yet to see the full impact of Snowden's disclosures. Now for the first time, Greenwald fits all the pieces together, recounting his high-intensity ten-day trip to Hong Kong, examining the broader implications of the surveillance detailed in his reporting for The Guardian, and revealing fresh information on the NSA's unprecedented abuse of power with never-before-seen documents entrusted to him by Snowden himself. Going beyond NSA specifics, Greenwald also takes on the establishment media, excoriating their habitual avoidance of adversarial reporting on the government and their failure to serve the interests of the people. Finally, he asks what it means both for individuals and for a nation's political health when a government pries so invasively into the private lives of its citizens—and considers what safeguards and forms of oversight are necessary to protect democracy in the digital age. Coming at a landmark moment in American history, No Place to Hide is a fearless, incisive, and essential contribution to our understanding of the U.S. surveillance state.

The Virtual Weapon and International Order

Lucas Kello

An urgently needed examination of the current cyber revolution that draws on case studies to develop conceptual frameworks for understanding its effects on international order The cyber revolution is the revolution of our time. The rapid expansion of cyberspace brings both promise and peril. It promotes new modes of political interaction, but it also disrupts interstate dealings and empowers non-state actors who may instigate diplomatic and military crises. Despite significant experience with cyber phenomena, the conceptual apparatus to analyze, understand, and address their effects on international order remains primitive. Here, Lucas Kello adapts and applies international relations theory to create new ways of thinking about cyber strategy. Kello draws on a broad range of case studies, including the Estonian crisis, the Olympic Games operation against Iran, and the cyber attack against Sony Pictures. Synthesizing qualitative data from government documents, forensic reports of major incidents and interviews with senior officials from around the globe, this important work establishes new conceptual benchmarks to help security experts adapt strategy and policy to the unprecedented challenges of our times.

Perspectives on Digital Humanism

Hannes Werthner, Erich Prem, Edward A. Lee, Carlo Ghezzi

This open access book aims to set an agenda for research and action in the field of Digital Humanism through short essays written by selected thinkers from a variety of disciplines, including computer science, philosophy, education, law, economics, history, anthropology, political science, and sociology. This initiative emerged from the Vienna Manifesto on Digital Humanism and the associated lecture series. Digital Humanism deals with the complex relationships between people and machines in digital times. It acknowledges the potential of information technology. At the same time, it points to societal threats such as privacy violations and ethical concerns around artificial intelligence, automation and loss of jobs, ongoing monopolization on the Web, and sovereignty. Digital Humanism aims to address these topics with a sense of urgency but with a constructive mindset. The book argues for a Digital Humanism that analyses and, most importantly, influences the complex interplay of technology and humankind toward a better society and life while fully respecting universal human rights. It is a call to shaping technologies in accordance with human values and needs.

The Basics of Cyber Safety

Computer and Mobile Device Safety Made Easy

John Sammons, Michael Cross

The Basics of Cyber Safety: Computer and Mobile Device Safety Made Easy presents modern tactics on how to secure computer and mobile devices, including what behaviors are safe while surfing, searching, and interacting with others in the virtual world. The book's author, Professor John Sammons, who teaches information security at Marshall University, introduces readers to the basic concepts of protecting their computer, mobile devices, and data during a time that is described as the most connected in history. This timely resource provides useful information for readers who know very little about the basic principles of keeping the devices they are connected to—or themselves—secure while online. In addition, the text discusses, in a non-technical way, the cost of connectedness to your privacy, and what you can do to it, including how to avoid all kinds of viruses, malware, cybercrime, and identity theft. Final sections provide the latest information on safe computing in the workplace and at school, and give parents steps they can take to keep young kids and teens safe online. - Provides the most straightforward and up-to-date guide to cyber safety for anyone who ventures online for work, school, or personal use - Includes real world examples that demonstrate how cyber criminals commit their crimes, and what users can do to keep their data safe