Seguridad infórmatica, página 5 de 23

El hacking es el arte de resolver problemas de forma creativa, tanto si eso significa encontrar una solución poco convencional para un problema complicado como si se trata de aprovechar los agujeros de una programacion descuidada. Muchas personas se autodenominan hackers, pero pocos tienen los conocimientos tecnicos necesarios para realmente ponerlo a prueba. En lugar de simplemente enseñar a usar las vulnerabilidades existentes, el autor Jon Erickson explica como funcionan las complejas tecnicas de hacking, mostrando los fundamentos de la programacion en C desde el punto de vista de un hacker. Podemos ponernos manos a la obra depurando codigo, desbordando buferes, secuestrando comunicaciones de red, esquivando protecciones, aprovechando debilidades en contraseñas y quizas, incluso descubriendo nuevas vulnerabilidades. El LiveCD que incluye esta obra proporciona un entorno completo Linux de programacion y depuracion; todo sin modificar el sistema operativo instalado, y que le permite seguir los ejemplos del libro, a medida que aumenta nuestro conocimiento y exploramos nuestras propias tecnicas de hacking.

A collection that details how to conduct digital investigations in both criminal and civil contexts, and how to locate and utilize digital evidence on computers, networks, and embedded systems. It provides guidance in the three main areas of practice: Forensic Analysis, Electronic Discovery and Intrusion Investigation.

The book will start talking about the security posture before moving to Red Team tactics, where you will learn the basic syntax for the Windows and Linux tools that are commonly used to perform the necessary operations. You will also gain hands-on experience of using new Red Team techniques with powerful tools such as python and PowerShell, which will enable you to discover vulnerabilities in your system and how to exploit them. Moving on, you will learn how a system is usually compromised by adversaries, and how they hack user's identity, and the various tools used by the Red Team to find vulnerabilities in a system. In the next section, you will learn about the defense strategies followed by the Blue Team to enhance the overall security of a system. You will also learn about an in-depth strategy to ensure that there are security controls in each network layer, and how you can carry out the recovery process of a compromised system. Finally, you will learn how to create a vulnerability management strategy and the different techniques for manual log analysis. By the end of this book, you will be well-versed with Red Team and Blue Team techniques and will have learned the techniques used nowadays to attack and defend systems.

Updated for Windows 8 and the latest version of Linux.The best way to stay safe online is to stop hackers before they attack - first, by understanding their thinking and second, by ethically hacking your own site to measure the effectiveness of your security. This practical, top-selling guide will help you do both. Fully updated for Windows 8 and the latest version of Linux, Hacking For Dummies, 4th Edition explores the malicious hacker''s mindset and helps you develop an ethical hacking plan (also known as penetration testing) using the newest tools and techniques.More timely than ever, this must-have book covers the very latest threats, including web app hacks, database hacks, VoIP hacks, and hacking of mobile devices.- Guides you through the techniques and tools you need to stop hackers before they hack you- Completely updated to examine the latest hacks to Windows 8 and the newest version of Linux- Explores the malicious hackers''s mindset so that you can counteract or avoid attacks completely- Suggests ways to report vulnerabilities to upper management, manage security changes, and put anti-hacking policies and procedures in place If you''re responsible for security or penetration testing in your organization, or want to beef up your current system through ethical hacking, make sure you get Hacking For Dummies, 4th Edition.

As a result of a rigorous, methodical process that (ISC) follows to routinely update its credential exams, it has announced that enhancements will be made to both the Certified Information Systems Security Professional (CISSP) credential, beginning April 15, 2015. (ISC) conducts this process on a regular basis to ensure that the examinations and subsequent training and continuing professional education requirements encompass the topic areas relevant to the roles and responsibilities of todays practicing information security professionals.Refreshed technical content has been added to the official (ISC) CISSP CBK to reflect the most current topics in the information security industry today. Some topics have been expanded (e.g., asset security, security assessment and testing), while other topics have been realigned under different domains. The result is an exam that most accurately reflects the technical and managerial competence required from an experienced information security professional to effectively design, engineer, implement and manage an organizations information security program within an ever-changing security landscape.The domain names have been updated as follows:CISSP Domains, Effective April 15, 20151. Security and Risk Management (Security, Risk, Compliance, Law, Regulations, Business Continuity)2. Asset Security (Protecting Security of Assets)3. Security Engineering (Engineering and Management of Security)4. Communications and Network Security (Designing and Protecting Network Security)5. Identity and Access Management (Controlling Access and Managing Identity)6. Security Assessment and Testing (Designing, Performing, and Analyzing Security Testing)7. Security Operations (Foundational Concepts, Investigations, Incident Management, Disaster Recovery)8. Software Development Security (Understanding, Applying, and Enforcing Software Security)Some candidates may be wondering how these updates affect training materials for the CISSP credential. As part of the organizations comprehensive education strategy and certifying body best practices, (ISC) training materials do not teach directly to its credential examinations. Rather, (ISC) Education is focused on teaching the core competencies relevant to the roles and responsibilities of todays practicing information security professional. It is designed to refresh and enhance the knowledge of experienced industry professionals.

En un mundo en el que todos utilizamos herramientas que llamamos "sociales" para la comunicación personal y profesional, y en el que buena parte de nuestra información viaja por las redes o se guarda en la "nube", todos deberiamos conocer los fundamentos minimos para mantener una actitud prudente en nuestra vida digital

THE INSTANT NEW YORK TIMES BESTSELLER AND WORLD ECONOMIC FORUM BOOK CLUB PICK*'A clear, compelling guide to some of the most pressing debates in technology today.' Bill Gates'A colourful and insightful insiders' view of how technology is both empowering us and threatening us. From privacy to cyberattacks, this timely book is a useful guide for how to navigate the digital future.' Walter Isaacson, bestselling author of Steve JobsFrom Microsoft's President and one of the tech industry's wisest thinkers, a frank and thoughtful reckoning with how to balance enormous promise and existential risk as the digitization of everything accelerates. With new chapters on the pandemic and beyond.

A practical guide to understanding and analyzing cyber attacks by advanced attackers, such as nation states.Cyber attacks are no longer the domain of petty criminals. Today, companies find themselves targeted by sophisticated nation state attackers armed with the resources to craft scarily effective campaigns. This book is a detailed guide to understanding the major players in these cyber wars, the techniques they use, and the process of analyzing their advanced attacks. Whether youre an individual researcher or part of a team within a Security Operations Center (SoC), youll learn to approach, track, and attribute attacks to these advanced actors.

The World Economic Forum regards the threat of cyber attack as one of the top five global risks confronting nations of the world today. Cyber attacks are increasingly targeting the core functions of the economies in nations throughout the world. The threat to attack critical infrastructures, disrupt critical services, and induce a wide range of damage is becoming more difficult to defend against. Cybersecurity: Protecting Critical Infrastructures from Cyber Attack and Cyber Warfare examines the current cyber threat landscape and discusses the strategies being used by governments and corporations to protect against these threats.The book first provides a historical reference, detailing the emergence of viruses, worms, malware, and other cyber threats that created the need for the cybersecurity field. It then discusses the vulnerabilities of our critical infrastructures, the broad arsenal of cyber attack tools, and the various engineering design issues involved in protecting our infrastructures. It goes on to cover cyber intelligence tactics, recent examples of cyber conflict and warfare, and the key issues in formulating a national strategy to defend against cyber warfare.

Instalar, configurar e implementar Windows Server 2008 en un entorno empresarial, adaptándose a las exigencias del mercado laboral referente a las TI (Tecnologías de la Información).

El príncipe nigeriano ansioso por entregar su herencia, el amigo de la familia varado inesperadamente en Noruega, la solitaria belleza rusa en busca del amor... todo ese spam llega a nuestras bandejas de entrada con sus peticiones de ayuda, dinero y su numero de seguro social. En Dot.Con, Veitch por fin responde a la pregunta: ¿que pasaria si respondieras? Nuestro primer instinto es eliminar sin abrir los correos electronicos sospechosos que aparecen en nuestras bandejas de entrada. ¿Que pasaria si contestaras a esa princesa depuesta que te pide dinero en Gmail? Veitch se sumerge en esta absurda cultura de estafas por correo electronico, jugando con los estafadores en su propio campo, y estos son los sorprendentes, extraños e hilarantes resultados.

El Internet de los Cuerpos ya está entre nosotros. Estamos construyendo una sociedad híbrida, en la que el código informático y el cuerpo humano se mezclan. Todo se está convirtiendo en un ordenador. Los marcapasos, las bombas de insulina, las pastillas o las lentes de contacto son inteligentes. La creciente interconexion de dispositivos medicos, el uso de conexiones remotas para su mantenimiento y la falta de ciberseguridad hacen que el sector de la salud sea especialmente vulnerable. En estas circunstancias, seria posible obtener acceso no autorizado y manipular el dispositivo del paciente. Varias pruebas realizadas en laboratorios de Estados Unidos demuestran que determinados dispositivos medicos son vulnerables a ciberataques.VIVIMOS EN UN MUNDO EN EL QUE TODO SE ESTA CONVIRTIENDO EN UN ORDENADOR

Hoy día, gracias a las nuevas tecnologías, desde cualquier lugar y de forma rápida, podemos acceder a todo tipo de información, almacenar o compartir recuerdos o datos, así como relacionarnos con otras personas y comunicarnos practicamente sin limites. Es por tanto imprescindible que entendamos el funcionamiento basico de internet, de las nuevas tecnologias y de los dispositivos que permiten su conexion. Debemos reconocer los riesgos que acechan y cuanto conlleva no adoptar las medidas basicas de proteccion antes de navegar por la red o no cuidar adecuadamente la privacidad de nuestra informacion.Jose Angel Fernandez, policia especializado en delincuencia informatica y tecnologica de la Policia Nacional, nos presenta en esta obra informacion de gran utilidad para conocer todos y cada uno de los peligros a los que podemos enfrentarnos en el ciberespacio y en las redes sociales, asi como aquellos causados por un inadecuado uso del smartphone y demas dispositivos tecnologicos.Esta obra ofrece soluciones y recomendaciones de seguridad, pautas y consejos para proteger las comunicaciones, nos informa sobre el derecho al olvido y la proteccion de datos, describe el correcto uso de los distintos medios de pago, nos indica como proceder para la formalizacion de denuncias, y, como aviso para aquellos navegantes con malas intenciones, advierte de las consecuencias de las conductas ilegales conforme a la legislacion española.Prologado por Carolina Gonzalez Garcia, excommunity manager de la Policia Nacional.

SEGURIDAD EN UNIX Y REDES VERSION 2.1' es un libro del autor VILLALON HUERTA, ANTONIO editado por NAU LLIBRES. SEGURIDAD EN UNIX Y REDES VERSION 2.1' tiene un c�digo EAN 9788418047046 y consta de 6

El propósito de este libro es mostrar a las personas y equipos responsables de la ciberseguridad, estudiantes, ingenieros y profesionales del sector cómo conocer y cuantificar el ciberriesgo para gestionarlo de acuerdo con la tolerancia decidida por una organizacion. Sin olvidar que hay que alinear esta gestion con la consecucion de los objetivos de negocio. Para ello se desarrollan los siguientes temas: La figura del director de seguridad, su evolucion, su contexto y su mision actual en relacion con la gestion del ciberriesgo. Las fases que se deben seguir para gestionar este tipo de riesgos y los estandares, marcos de trabajo o metodologias que se pueden seguir para hacerlo. Recomendaciones, basadas en la experiencia, para las fases mas importantes de la gestion del ciberriesgo que ayuden a cualquier persona que tenga que llevarlas a cabo a hacerlo con ciertas garantias de exito. Las estrategias de mitigacion y de transferencia del ciberriesgo. La privacidad, como un aspecto especifico que debe tenerse en cuenta en el proceso de gestion. El libro se estructura en diez capitulos en los que, de una forma amena y didactica, se proporcionan herramientas actuales, utiles y practicas para identificar los riesgos, analizar su probabilidad e impacto, cuantificarlos, mitigarlos y

Trust and Records in an Open Digital Environment explores issues that arise when digital records are entrusted to the cloud and will help professionals to make informed choices in the context of a rapidly changing digital economy.Showing that records need to ensure public trust, especially in the era of alternative truths, this volume argues that reliable resources, which are openly accessible from governmental institutions, e-services, archival institutions, digital repositories, and cloud-based digital archives, are the key to an open digital environment. The book also demonstrates that current established practices need to be reviewed and amended to include the networked nature of the cloud-based records, to investigate the role of new players, like cloud service providers (CSP), and assess the potential for implementing new, disruptive technologies like blockchain. Stani and the contributors address these challenges by taking three themes state, citizens, and documentary form and discussing their interaction in the context of open government, open access, recordkeeping, and digital preservation.Exploring what is needed to enable the establishment of an open digital environment, Trust and Records in an Open Digital Environment should be essential reading for data, information, document, and records management professionals. It will also be a key text for archivists, librarians, professors, and students working in the information sciences and other related fields.