|
Books > Computing & IT > Social & legal aspects of computing > Privacy & data protection
As economies globalize, the number and power of transnational
companies increases, especially in developing countries. Relevant,
reliable, and comparable financial information and a common
business language are needed to ensure communication between all
users of financial information. Throughput Accounting in a
Hyperconnected World provides innovative insights into
controversial debates regarding the configuration and use of
accounting and finance information both internally within economic
entities and through third parties. These debates underline the
major responsibility of users when configuring accounting and
finance models and thereby in modelling business information. The
content within this publication covers risk analysis, social
accounting, and entrepreneurial models and is designed for
managers, accountants, risk managers, academics, researchers,
practitioners, and students.
Achieve the gold standard in penetration testing with Kali using
this masterpiece, now in its fourth edition Key Features Rely on
the most updated version of Kali to formulate your pentesting
strategies Test your corporate network against threats Explore new
cutting-edge wireless penetration tools and features Book
DescriptionKali Linux is a comprehensive penetration testing
platform with advanced tools to identify, detect, and exploit the
vulnerabilities uncovered in the target network environment. With
Kali Linux, you can apply the appropriate testing methodology with
defined business objectives and a scheduled test plan, resulting in
successful penetration testing project engagement. This fourth
edition of Kali Linux 2018: Assuring Security by Penetration
Testing starts with the installation of Kali Linux. You will be
able to create a full test environment to safely practice scanning,
vulnerability assessment, and exploitation. You'll explore the
essentials of penetration testing by collecting relevant data on
the target network with the use of several footprinting and
discovery tools. As you make your way through the chapters, you'll
focus on specific hosts and services via scanning and run
vulnerability scans to discover various risks and threats within
the target, which can then be exploited. In the concluding
chapters, you'll apply techniques to exploit target systems in
order to gain access and find a way to maintain that access. You'll
also discover techniques and tools for assessing and attacking
devices that are not physically connected to the network, including
wireless networks. By the end of this book, you will be able to use
NetHunter, the mobile version of Kali Linux, and write a detailed
report based on your findings. What you will learn Conduct the
initial stages of a penetration test and understand its scope
Perform reconnaissance and enumeration of target networks Obtain
and crack passwords Use Kali Linux NetHunter to conduct wireless
penetration testing Create proper penetration testing reports
Understand the PCI-DSS framework and tools used to carry out
segmentation scans and penetration testing Carry out wireless
auditing assessments and penetration testing Understand how a
social engineering attack such as phishing works Who this book is
forThis fourth edition of Kali Linux 2018: Assuring Security by
Penetration Testing is for pentesters, ethical hackers, and IT
security professionals with basic knowledge of Unix/Linux operating
systems. Prior knowledge of information security will help you
understand the concepts in this book
Build your organization's cyber defense system by effectively
implementing digital forensics and incident management techniques
Key Features Create a solid incident response framework and manage
cyber incidents effectively Perform malware analysis for effective
incident response Explore real-life scenarios that effectively use
threat intelligence and modeling techniques Book DescriptionAn
understanding of how digital forensics integrates with the overall
response to cybersecurity incidents is key to securing your
organization's infrastructure from attacks. This updated second
edition will help you perform cutting-edge digital forensic
activities and incident response. After focusing on the
fundamentals of incident response that are critical to any
information security team, you'll move on to exploring the incident
response framework. From understanding its importance to creating a
swift and effective response to security incidents, the book will
guide you with the help of useful examples. You'll later get up to
speed with digital forensic techniques, from acquiring evidence and
examining volatile memory through to hard drive examination and
network-based evidence. As you progress, you'll discover the role
that threat intelligence plays in the incident response process.
You'll also learn how to prepare an incident response report that
documents the findings of your analysis. Finally, in addition to
various incident response activities, the book will address malware
analysis, and demonstrate how you can proactively use your digital
forensic skills in threat hunting. By the end of this book, you'll
have learned how to efficiently investigate and report unwanted
security breaches and incidents in your organization. What you will
learn Create and deploy an incident response capability within your
own organization Perform proper evidence acquisition and handling
Analyze the evidence collected and determine the root cause of a
security incident Become well-versed with memory and log analysis
Integrate digital forensic techniques and procedures into the
overall incident response process Understand the different
techniques for threat hunting Write effective incident reports that
document the key findings of your analysis Who this book is forThis
book is for cybersecurity and information security professionals
who want to implement digital forensics and incident response in
their organization. You will also find the book helpful if you are
new to the concept of digital forensics and are looking to get
started with the fundamentals. A basic understanding of operating
systems and some knowledge of networking fundamentals are required
to get started with this book.
Get more from your network by securing its infrastructure and
increasing its effectiveness Key Features Learn to choose the best
network scanning toolset for your system Implement different
concepts of network scanning such as port scanning and OS detection
Adapt a practical approach to securing your network Book
DescriptionNetwork scanning is the process of assessing a network
to identify an active host network; same methods can be used by an
attacker or network administrator for security assessment. This
procedure plays a vital role in risk assessment programs or while
preparing a security plan for your organization. Practical Network
Scanning starts with the concept of network scanning and how
organizations can benefit from it. Then, going forward, we delve
into the different scanning steps, such as service detection,
firewall detection, TCP/IP port detection, and OS detection. We
also implement these concepts using a few of the most prominent
tools on the market, such as Nessus and Nmap. In the concluding
chapters, we prepare a complete vulnerability assessment plan for
your organization. By the end of this book, you will have hands-on
experience in performing network scanning using different tools and
in choosing the best tools for your system. What you will learn
Achieve an effective security posture to design security
architectures Learn vital security aspects before moving to the
Cloud Launch secure applications with Web Application Security and
SQL Injection Explore the basics of threat detection/response/
mitigation with important use cases Learn all about integration
principles for PKI and tips to secure it Design a WAN
infrastructure and ensure security over a public WAN Who this book
is forIf you are a security professional who is responsible for
securing an organization's infrastructure, then this book is for
you.
Web penetration testing by becoming an ethical hacker. Protect the
web by learning the tools, and the tricks of the web application
attacker. Key Features Builds on books and courses on penetration
testing for beginners Covers both attack and defense perspectives
Examines which tool to deploy to suit different applications and
situations Book DescriptionBecoming the Hacker will teach you how
to approach web penetration testing with an attacker's mindset.
While testing web applications for performance is common, the
ever-changing threat landscape makes security testing much more
difficult for the defender. There are many web application tools
that claim to provide a complete survey and defense against
potential threats, but they must be analyzed in line with the
security needs of each web application or service. We must
understand how an attacker approaches a web application and the
implications of breaching its defenses. Through the first part of
the book, Adrian Pruteanu walks you through commonly encountered
vulnerabilities and how to take advantage of them to achieve your
goal. The latter part of the book shifts gears and puts the newly
learned techniques into practice, going over scenarios where the
target may be a popular content management system or a
containerized application and its network. Becoming the Hacker is a
clear guide to web application security from an attacker's point of
view, from which both sides can benefit. What you will learn Study
the mindset of an attacker Adopt defensive strategies Classify and
plan for standard web application security threats Prepare to
combat standard system security problems Defend WordPress and
mobile applications Use security tools and plan for defense against
remote execution Who this book is forThe reader should have basic
security experience, for example, through running a network or
encountering security issues during application development. Formal
education in security is useful, but not required. This title is
suitable for people with at least two years of experience in
development, network management, or DevOps, or with an established
interest in security.
|
|