Advertisement

Privileged Attack Vectors

Building Effective Cyber-Defense Strategies to Protect Organizations

  • Morey J. Haber
  • Brad Hibbert

Table of contents

  1. Front Matter
    Pages i-xxvii
  2. Morey J. Haber, Brad Hibbert
    Pages 1-23
  3. Morey J. Haber, Brad Hibbert
    Pages 25-38
  4. Morey J. Haber, Brad Hibbert
    Pages 39-48
  5. Morey J. Haber, Brad Hibbert
    Pages 49-52
  6. Morey J. Haber, Brad Hibbert
    Pages 53-68
  7. Morey J. Haber, Brad Hibbert
    Pages 69-73
  8. Morey J. Haber, Brad Hibbert
    Pages 75-78
  9. Morey J. Haber, Brad Hibbert
    Pages 79-82
  10. Morey J. Haber, Brad Hibbert
    Pages 83-89
  11. Morey J. Haber, Brad Hibbert
    Pages 91-106
  12. Morey J. Haber, Brad Hibbert
    Pages 107-118
  13. Morey J. Haber, Brad Hibbert
    Pages 119-130
  14. Morey J. Haber, Brad Hibbert
    Pages 131-137
  15. Morey J. Haber, Brad Hibbert
    Pages 139-142
  16. Morey J. Haber, Brad Hibbert
    Pages 143-155
  17. Morey J. Haber, Brad Hibbert
    Pages 157-161
  18. Morey J. Haber, Brad Hibbert
    Pages 163-165
  19. Morey J. Haber, Brad Hibbert
    Pages 167-169
  20. Morey J. Haber, Brad Hibbert
    Pages 171-188
  21. Morey J. Haber, Brad Hibbert
    Pages 189-204
  22. Morey J. Haber, Brad Hibbert
    Pages 205-210
  23. Morey J. Haber, Brad Hibbert
    Pages 211-230
  24. Morey J. Haber, Brad Hibbert
    Pages 231-235
  25. Morey J. Haber, Brad Hibbert
    Pages 237-239
  26. Back Matter
    Pages 241-247

About this book

Introduction

See how privileges, passwords, vulnerabilities, and exploits can be combined as an attack vector and breach any organization. Cyber attacks continue to increase in volume and sophistication. It is not a matter of if, but when, your organization will be breached. Attackers target the perimeter network, but, in recent years, have refocused their efforts on the path of least resistance: users and their privileges.

In decades past, an entire enterprise might be sufficiently managed through just a handful of credentials. Today’s environmental complexity means privileged credentials are needed for a multitude of different account types (from domain admin and sysadmin to workstations with admin rights), operating systems (Windows, Unix, Linux, etc.), directory services, databases, applications, cloud instances, networking hardware, Internet of Things (IoT), social media, and more. When unmanaged, these privileged credentials pose a significant threat from external hackers and insider threats.

There is no one silver bullet to provide the protection you need against all vectors and stages of an attack. And while some new and innovative solutions will help protect against or detect the initial infection, they are not guaranteed to stop 100% of malicious activity. The volume and frequency of privilege-based attacks continues to increase and test the limits of existing security controls and solution implementations.

Privileged Attack Vectors details the risks associated with poor privilege management, the techniques that hackers and insiders leverage, and the defensive measures that organizations must adopt to protect against a breach, protect against lateral movement, and improve the ability to detect hacker activity or insider threats in order to mitigate the impact. 

What You’ll Learn:

  • Know how identities, credentials, passwords, and exploits can be leveraged to escalate privileges during an attack
  • Implement defensive and auditing strategies to mitigate the threats and risk
  • Understand a 12-step privileged access management Implementation plan
  • Consider deployment and scope, including risk, auditing, regulations, and oversight solutions

Keywords

Privileged Access Management PAM Password Management Session Management Least Privileged Lateral Movement Privileged Escalation Vulnerabilities Cyber Threat Cybersecurity Information Security Infosec Exploits Administrator Root

Authors and affiliations

  • Morey J. Haber
    • 1
  • Brad Hibbert
    • 2
  1. 1.HeathrowUSA
  2. 2.CarpCanada

Bibliographic information