Incorporate offense and defense for a more effective network security strategy Network Attacks and Exploitation provides a clear, comprehensive roadmap for developing a complete offensive and defensive strategy to engage in or thwart hacking and computer espionage. Written by an expert in both government and corporate vulnerability and security operations, this guide helps you understand the principles of the space and look beyond the individual technologies of the moment to develop durable comprehensive solutions. Numerous real-world examples illustrate the offensive and defensive concepts at work, including Conficker, Stuxnet, the Target compromise, and more. You will find clear guidance toward strategy, tools, and implementation, with practical advice on blocking systematic computer espionage and the theft of information from governments, companies, and individuals. Assaults and manipulation of computer networks are rampant around the world. One of the biggest challenges is fitting the ever-increasing amount of information into a whole plan or framework to develop the right strategies to thwart these attacks. This book clears the confusion by outlining the approaches that work, the tools that work, and resources needed to apply them. Understand the fundamental concepts of computer network exploitation Learn the nature and tools of systematic attacks Examine offensive strategy and how attackers will seek to maintain their advantage Understand defensive strategy, and how current approaches fail to change the strategic balance Governments, criminals, companies, and individuals are all operating in a world without boundaries, where the laws, customs, and norms previously established over centuries are only beginning to take shape. Meanwhile computer espionage continues to grow in both frequency and impact. This book will help you mount a robust offense or a strategically sound defense against attacks and exploitation. For a clear roadmap to better network security, Network Attacks and Exploitation is your complete and practical guide.

The book provides a clear and comprehensive roadmap for developing a complete offensive and defensive strategy to thwart both network attacks (hacking) and network exploitation (espionage). Computer Network ExploitationStrategic Collection (leaked NSA programs)Directed Collection (China stealing Patriot Missile designs)Virtual Computer Network Attack (VCNA) (Russia vs. Estonia, Georgia)The AttackerHumanity Access Targeting CapabilitiesExploitation ExpertiseNetworking ExpertiseSoftware Development ExpertiseThe DefenderNetwork DesignSecurity PolicyDefensive Life Cycle The Helpful DefenderAttacker FrictionsFlawed Attack ToolsUpgrades and UpdatesDefender Frictions Flawed Software and UpdatesOffensive StrategyProgram SecurityAttacker LiabilitiesProgram Security CostsDefensive StrategyFailed TacticsApplication WhitelistingNetwork segmentation and segregationWeb domain whitelisting for all domainsCloud Based SecurityOffensive Case Studies Stuxnet, Target, ATM thieves, etc.Defensive strategies to prevent exploitation