CISO's Guide to Penetration Testing: A Framework to Plan, Manage, and Maximize Benefits - Brossura

Tiller, James S.

Brossura

ISBN 10: 0367382008 ISBN 13: 9780367382001

Casa editrice: Auerbach Publications, 2020

Riassunto

CISO's Guide to Penetration Testing: A Framework to Plan, Manage, and Maximize Benefits details the methodologies, framework, and unwritten conventions penetration tests should cover to provide the most value to your organization and your customers. Discussing the process from both a consultative and technical perspective, it provides an overview of the common tools and exploits used by attackers along with the rationale for why they are used.

From the first meeting to accepting the deliverables and knowing what to do with the results, James Tiller explains what to expect from all phases of the testing life cycle. He describes how to set test expectations and how to identify a good test from a bad one. He introduces the business characteristics of testing, the imposed and inherent limitations, and describes how to deal with those limitations.

The book outlines a framework for protecting confidential information and security professionals during testing. It covers social engineering and explains how to tune the plethora of options to best use this investigative tool within your own environment.

Ideal for senior security management and anyone else responsible for ensuring a sound security posture, this reference depicts a wide range of possible attack scenarios. It illustrates the complete cycle of attack from the hacker’s perspective and presents a comprehensive framework to help you meet the objectives of penetration testing―including deliverables and the final report.

Su questo libro

Informazioni sull'autore

James S. Tiller is the Vice-President of Security Professional Services, North American BT Global Services.

Dalla quarta di copertina

Presenting the underlying methodologies and concepts required for successful penetration testing, this book discusses the process of penetration testing from both consultative and technical perspectives. It provides an overview of the common tools and exploits used by attackers along with the rationale for why they are used. It depicts attack scenarios to show the complete cycle of attack from the hacker's perspective. The methodology detailed provides a comprehensive solution to meeting the objectives of penetration testing. The author covers the deliverables, including the final report, explaining how to use the information from the text.

Dettagli dell'edizione

• Editore: Auerbach Publications
• Data di pubblicazione: 2020
• Lingua: Inglese
• ISBN 10: 0367382008
• ISBN 13: 9780367382001
• Rilegatura: Copertina flessibile
• Numero edizione: 1
• Numero di pagine: 389
• Contatto del produttore: Taylor and Francis, GPSR Taylor and Francis; gpsr@taylorandfrancis.com; ; Taylor & Francis Verlag GmbH, Kaufingerstraße 24; München; 80331; Germania