Identity Attack Vectors: Implementing an Effective Identity and Access Management Solution


Identity Attack Vectors: Implementing an Effective Identity and Access Management Solution
By 作者: Morey J. Haber - Darran Rolls
ISBN-10 书号: 1484251644
ISBN-13 书号: 9781484251645
Edition 版本: 1st ed.
Release Finelybook 出版日期: 2019-12-19
pages 页数: (196 )

Book Description to Finelybook sorting

Discover how poor identity and privilege management can be leveraged to compromise accounts and credentials within an organization. Learn how role-based identity assignments, entitlements, and auditing strategies can be implemented to mitigate the threats leveraging accounts and identities and how to manage compliance for regulatory initiatives.
As a solution, Identity Access Management (IAM) has emerged as the cornerstone of enterprise security. Managing accounts, credentials, roles, certification, and attestation reporting for all resources is now a security and compliance mandate. When identity theft and poor identity management is leveraged as an attack vector, risk and vulnerabilities increase exponentially. As cyber attacks continue to increase in volume and sophistication, it is not a matter of if, but when, your organization will have an incident. Threat actors target accounts, users, and their associated identities, to conduct their malicious activities through privileged attacks and asset vulnerabilities.
Identity Attack Vectors details the risks associated with poor identity management practices, the techniques that threat actors and insiders leverage, and the operational best practices that organizations should adopt to protect against identity theft and account compromises, and to develop an effective identity governance program.
What You Will Learn

Understand the concepts behind an identity and how their associated credentials and accounts can be leveraged as an attack vector
Implement an effective Identity Access Management (IAM) program to manage identities and roles, and provide certification for regulatory compliance
See where identity management controls play a part of the cyber kill chain and how privileges should be managed as a potential weak link
Build upon industry standards to integrate key identity management technologies into a corporate ecosystem
Plan for a successful deployment, implementation scope, measurable risk reduction, auditing and discovery, regulatory reporting, and oversight based on real-world strategies to prevent identity attack vectors

本文中包含更多资源
您需要才可以下载或查看,隐藏内容需1积分,没有帐号? 捐 助 获取帐号
赞(0) 捐助
未经允许不得转载:finelybook » Identity Attack Vectors: Implementing an Effective Identity and Access Management Solution
分享到: 更多 (0)

评论 抢沙发

  • 昵称 (必填)
  • 邮箱 (必填)
  • 网址

觉得文章有用就打赏一下文章作者

支付宝扫一扫打赏

微信扫一扫打赏