Build a network security threat model with this comprehensive learning guide
Key Features
- Develop a network security threat model for your organization
- Gain hands-on experience in working with network scanning and analyzing tools
- Learn to secure your network infrastructure
Book Description
The tech world has been taken over by digitization to a very large extent, and so it’s become extremely important for an organization to actively design security mechanisms for their network infrastructures. Analyzing vulnerabilities can be one of the best ways to secure your network infrastructure.
Network Vulnerability Assessment starts with network security assessment concepts, workflows, and architectures. Then, you will use open source tools to perform both active and passive network scanning. As you make your way through the chapters, you will use these scanning results to analyze and design a threat model for network security. In the concluding chapters, you will dig deeper into concepts such as IP network analysis, Microsoft Services, and mail services. You will also get to grips with various security best practices, which will help you build your network security mechanism.
By the end of this book, you will be in a position to build a security framework fit for an organization.
What you will learn
- Develop a cost-effective end-to-end vulnerability management program
- Implement a vulnerability management program from a governance perspective
- Learn about various standards and frameworks for vulnerability assessments and penetration testing
- Understand penetration testing with practical learning on various supporting tools and techniques
- Gain insight into vulnerability scoring and reporting
- Explore the importance of patching and security hardening
- Develop metrics to measure the success of the vulnerability management program
Who this book is for
Network Vulnerability Assessment is for security analysts, threat analysts, and any security professionals responsible for developing a network threat model for an organization. This book is also for any individual who is or wants to be part of a vulnerability management team and implement an end-to-end robust vulnerability management program.
Table of Contents
- Vulnerability Management Governance
- Setting up the Assessment Environment
- Security Assessment Prerequisites
- Information Gathering
- Enumeration & Vulnerability Assessment
- Gaining Network Access
- Assessing Web Application Security
- Privilege Escalation
- Maintaining access & clearing tracks
- Vulnerability Scoring
- Threat Modeling
- Patching & Security Hardening
- Vulnerability Reporting and metrics
Sagar Rahalkar is a seasoned information security professional having 12 years experience in various verticals of IS. His domain expertise is in Cybercrime investigations, Forensics, AppSec, VA/PT, Compliance, IT GRC etc. He has a master's degree in computer science and several certifications such as Cyber Crime Investigator, CEH, ECSA, ISO 27001 LA, IBM AppScan Certified, CISM, and PRINCE2. He has been associated with Indian law enforcement agencies for around 4 years dealing with cybercrime investigations and related training. He has received several awards and appreciations from senior officials of the police and defense organizations in India. He has also been a reviewer and author for various books and online publications.
