Name: Cybersecurity Beginner's Guide
Author: Joshua Mason
ISBN: 9781836207467

微信读书书城Cybersecurity Beginner's Guide

首页我的书架登录

翻译完成

切换

Cybersecurity Beginner's Guide

Joshua Mason

扉页
版权信息
+书签
Contributors
About the author
About the reviewer
Preface
Who this book is for
What this book covers
To get the most out of this book
Get in touch
Stay Relevant in a Rapidly Changing Cybersecurity World – Join Thousands of SecPro Subscribers
1 The Cybersecurity Landscape: A World of Hidden Dangers and Exciting Opportunities
Getting the most out of this book – get to know your free benefits
Next-gen reader
Interactive AI assistant (beta)
DRM-free PDF or ePub version
Understanding why cybersecurity matters
Unveiling the ancient roots of cybersecurity
Bridging the past to the digital present
The explosion of connectivity: The past 20–30 years
Modern vulnerabilities
Common vulnerabilities: Everyday examples
Weak passwords: The unlocked door
Outdated software: The festering wound
Overcomplexity: The enemy of security
Insider threat: The classic folly
Notable cybersecurity events
Meet the heroes: Cybersecurity professionals and their roles
The SOC: Incident responders and security analysts
Incident responders: The cyber first responders
Security analysts: The sentinels of the SOC
The red team: Playing the attackers to help the defenders
Penetration testers: The ethical attackers
NIST NICE Framework: A baseline for discussion
Oversight and Governance: Setting the rules and managing the Strategy
Executive cybersecurity leadership – Chief Information Security Officer (CISO): The security strategist
Compliance officers and auditors: Ensuring adherence to standards and law
Design and Development: Security starts in the planning
Security architects: The designers of digital defenses
Software developers, systems developers, and systems testing and evaluation engineers: Integrating security into software
Implementation and Operation: Keeping systems running securely
Systems administrators: The keepers of the infrastructure
Network engineers: Protecting the highways of the internet
Technical support: The face of cybersecurity
Protection and Defense: Behind the scenes but in the fight
Digital forensics: Cybersecurity's crime scene investigators
The analysts: Unveiling hidden threats
Investigation: Unraveling the digital mysteries
Summary
2 Decoding the Cyber Lexicon: A Beginner s Guide to Essential Terminology
Hackers, crackers, and phreaks: Who s who in cybersecurity?
Tech Model Railroad Club
Ancient themes
What is in a name?
The blurry lines of legality
Phreaking is not what you think
The rise of hacker communities: from 2600 to DEF CON
Online communities: The new frontier of hacker collaboration
Influencers and social media: Navigating the cybersecurity community
Black Hills Information Security and Antisyphon Training
Simply Cyber – Gerald Auger, PhD
Other notable influencers
Social media platforms: Twitter/X, Mastodon, and LinkedIn
The evolution of hacker culture: Collaboration and ethics
The CIA triad: Confidentiality, integrity, and availability
Confidentiality: Guarding the crown jewels
Integrity: Keeping the story straight
Availability: Always there when you need it
Bringing it all together: The CIA triad in action
Threat actors: The villains of the cyber world
Cybercriminals: The thieves and con artists
Motivation behind such crimes
Hacktivists: The digital protesters
Motivation behind such attacks
Nation-state actors: The cyber warriors
Motivation behind such attacks
Insider threats: The turncoats
Motivation behind such attacks
Script kiddies: The amateurs
Motivation behind such attacks
Cybersecurity buzzwords and tools: A glossary of key concepts
Buzzwords: The building blocks of cybersecurity
Cybersecurity tools: The defense system
Firewall: The gatekeeper of network traffic
Antivirus software: Scanning for and removing malware
Encryption: Protecting sensitive data
Virtual private network: Securing communication between client and server
Intrusion detection system: Monitoring for suspicious activity
Multi-factor authentication (MFA): Adding extra security layers
Penetration testing: Simulating cyberattacks
Backup solutions: Safeguarding data
Summary
3 The Anatomy of a Cyberattack
Advanced persistent threats: Organized and powerful
Mandiant and FireEye: Leaders in threat intelligence
How APTs shaped the cyber threat intelligence market
The art and science of APT naming
Why naming matters
Know the players to know the game
Russian APTs: The bears
Chinese APTs: The pandas
North Korean APTs: Lazarus Group and sub-groups
Iranian APTs: The kittens
Emerging threat actors
Understanding cyberattackers motivations
Financial gain: The pursuit of profit
Lazarus Group: Stealing to fund a nation
REvil: Ransomware as big business
Lapsus: Master of social engineering
Espionage: Stealing secrets for strategic advantage
APT 1: Industrial espionage at scale
APT 40: Maritime and defense sector specialists
APT 29 (Cozy Bear): The patient predator
Political influence: Shaping narratives and destabilizing adversaries
Fancy Bear (APT 28): Digital cold warriors
Sandworm team: masters of disruption
Tracking the attack: Understanding the playbook
Cyber Kill Chain: Seven steps to a breach
MITRE ATT&CK: Zooming in from stages to specific techniques
Different tactics used by attackers
Tactic: Initial access
Tactic: Persistence
Tactic: Lateral movement
Tactic: Exfiltration
Understanding how attackers work: Insights from industry reports
The attackers favorite techniques: What you need to know
Why these techniques matter
Summary
Subscribe to _secpro – The Newsletter Read by Thousands of Cybersecurity Professionals
4 Defending the Digital Fortress: Understanding the Layers of Cybersecurity Protection
The castle and the moat: Building a strong cybersecurity defense
Understanding the layers of defense
The importance of layered security
A common security pitfall
Technical controls: Firewalls, intrusion detection, and encryption
Firewalls: The digital moat
Intrusion Detection and Prevention Systems (IDPSs): Patrolling the perimeter
Real-world example: Stopping a ransomware attack
Encryption: Securing the crown jewels
Symmetric versus asymmetric encryption
Challenges and limitations of encryption
Administrative controls: Policies, procedures, and training
Security policies and procedures: Establishing the ground rules
Real-world example: Preventing data breaches through strong policies
Employee training: The human firewall
Real-world example: The cost of ignoring training
Incident response plans: Preparing for the worst
What is an incident response plan?
Real-world example: A successful incident response
Physical controls: Locks, guards, and environmental protection
Securing physical locations: Locks, badges, and surveillance
Real-world example: The importance of physical access control
Environmental protection: Safeguarding against natural disasters
Real-world example: Natural disaster preparedness
The role of physical security in preventing insider threats
Risk management: Identifying, assessing, and mitigating cyber risks
Identifying cyber risks: Knowing your enemy
Conducting a risk assessment
Risk management strategies: Mitigating cyber risks
Risk mitigation techniques
Real-world example: Risk management in action
Monitoring and reviewing risks
Threat modeling: Anticipating and preparing for attacks
The threat modeling process
The STRIDE framework
The DREAD framework
Creating a threat model: A step-by-step example
Summary
5 The Human Factor: Why People Are the Key to Success in Cybersecurity
Understanding the human element in cybersecurity
The historical susceptibility of humans to influence and trickery
Trust as a survival mechanism—and a vulnerability
Embracing human fallibility: designing cybersecurity with people in mind
Phishing and other scams: How to spot and avoid them
Smishing, vishing, and new frontiers of manipulation
How to spot scams: Red flags and common tactics
Practical strategies to avoid falling for scams
Building a cyber-aware culture
Establishing effective cybersecurity training programs
Building habits through reinforcement and self-awareness
Fostering confidence over fear
The role of leadership in security practices
Creating and enforcing security policies
Encouraging a proactive, informed security mindset
Building a blame-free security culture
Summary
6 Emerging Threats on the Horizon – AI/ML, Quantum Computing, and the Future of Cybersecurity
AI/ML in cybersecurity – friend or foe?
The promise of AI and ML in cybersecurity
The dark side: How attackers are using AI and ML
A historical perspective: Lessons from the past
The human–AI partnership
Challenges and opportunities
Conclusion: Friend, foe, or both?
The rise of adversarial AI – How attackers are using machine learning
What is adversarial machine learning?
Real-world examples of adversarial AI in action
Why adversarial AI is so effective
The arms race between defenders and attackers
Quantum computing – The next frontier in cybersecurity
How it works
How close are we?
Why quantum computing matters to cybersecurity
Breaking encryption: the quantum threat
The promise of quantum cryptography
Real-world progress and challenges
Preparing for the quantum era
Conclusion: A disruptive technology with dual impacts
Quantum-resistant cryptography – Preparing for the post-quantum era
The role of NIST
How quantum-resistant cryptography works
Challenges of transitioning to quantum-resistant cryptography
The role of governments and industry
Conclusion: securing the future
Staying ahead of the curve – The importance of continuous learning and adaptation
Adapting to a changing landscape
Collaboration and knowledge sharing
Practical steps for staying resilient
Summary
7 The Cybersecurity Career Landscape: A Map of Diverse Opportunities
The cybersecurity ecosystem: A wide range of roles and responsibilities
An ecosystem of specialists
Beyond the expected: Nontraditional routes and roles
A place for everyone
Entry-level roles
Cybersecurity analyst: The watchful guardian
Incident responder: The emergency responder of cybersecurity
Help desk technician: An unexpected cybersecurity gateway
Getting involved with the cybersecurity community
Specialized paths: Penetration testers, security engineers, and beyond
Penetration tester (ethical hacker)
Security engineer: The architect of defense
Cyber Threat Intelligence (CTI) analyst: The cyber detective
Expanding your impact through mentorship and community leadership
Building toward a broader vision
Leadership roles: Chief Information Security Officers (CISOs) and security managers
Why leadership matters in cybersecurity
CISO: The strategic visionary
Alternative leadership roles
Security manager: The operational leader
The human element of leadership
Transitioning to leadership
Industry-specific opportunities: Cybersecurity in finance, healthcare, government, and more
Cybersecurity in finance: Guarding the fortunes
Cybersecurity in healthcare: Protecting lives and data
Cybersecurity in government: Defending national interests
Cybersecurity in small businesses: Securing the underdogs
Cybersecurity across other industries
Nontraditional and cyber-adjacent roles: Expanding the cybersecurity ecosystem
Sales and marketing: Translating security for broader audiences
Training and education: Preparing the workforce
Consultants and auditors: Guiding organizations to better security
Security software development: Building the future of cyber defense
Cybersecurity adjacent roles: Finding opportunities where you are
The value of nontraditional paths
Summary
Subscribe to _secpro – The Newsletter Read by Thousands of Cybersecurity Professionals
8 Developing Essential Cybersecurity Skills for Career Success
Technical skills: The foundation of cybersecurity expertise
Understanding attack surfaces
Network security as a launchpad
Diving into system security
Breaking into software and application security
Building automation and problem-solving skills
Skill development through real-world practice
Staying current in a dynamic field
Soft skills: The power of human connection and critical thinking
Why soft skills matter in cybersecurity
Communicating with purpose
Applying ethical influence and social engineering for good
The principles of influence
Starting now: building your influence skills
Negotiation and conflict resolution
Team-based security exercises
Building cross-department collaboration
Leading with empathy and vision
Adapting to change and continuous learning
Turning knowledge into action
Cybersecurity certifications: Validating your expertise
Choosing the right certification
Training and education: Building your cybersecurity knowledge
Networking: Connecting with the cybersecurity community
Summary
9 Your Cybersecurity Journey Begins: Taking the Next Steps Toward a Rewarding Career
Getting started: Landing your first cybersecurity job
Resume and LinkedIn profile tips – Making your experience work for you
Write to match the role, not just to list your history
Resumes: Cut the noise, keep the value
LinkedIn: The public version of your resume
Interview preparation – Showing up with confidence
Understand what they're looking for
Tell better stories with STAR
Be ready to talk about your projects
Ask smart questions back
Practice without over-rehearsing
Navigating the cybersecurity job market
The hidden job market is real
Where to actually look
Read between the lines
Apply intentionally, not desperately
Keep learning while you search
Continuous learning and professional development
Keep your hands on the tools
Learn out loud
Join the right communities
Stay focused without burning out
Summary
References
10 Unleashing Your Inner Hacker
Technical requirements
Building your own cybersecurity playground: Setting up a pentesting lab
Installing VirtualBox
Setting up a Windows 11 virtual machine
Setting up Kali Linux
Command-line magic: Exploring your system like a cybersecurity pro
Why use the command line?
Getting started with Windows Command Prompt
whoami
cd and dir
systeminfo
tasklist
netstat -an
ipconfig
Exploring Kali Linux from the terminal
whoami
ip a
ping [Windows IP]
ps aux
sudo apt update
Summary
11 Open-Source Intelligence (OSINT): Uncovering Information Like a Pro
Technical requirements
Understanding the purpose and value of OSINT
Why OSINT matters in cybersecurity
A mindset, not just a skill
Accessible to all
Looking ahead
Using Google like a digital detective
Discovering files and internal documents
Uncovering login portals and admin panels
Finding forgotten subdomains
Searching by keywords and page titles
Use cases in cybersecurity
Google Hacking Database (GHDB)
Ethical considerations and legal boundaries
Try it yourself: safe example searches
Investigating domains with WHOIS
Understanding WHOIS data
Performing a WHOIS lookup
Red flags to watch out for
Practical OSINT use cases
Limitations and legal changes
Try it yourself
Reverse image search in action
What is reverse image search?
Using Google Images
Using TinEye
Real-world example: verifying a suspicious LinkedIn profile
Use cases in cybersecurity and journalism
Limitations and false positives
Try it yourself
Metadata matters
What is metadata?
Why metadata matters in OSINT
Tools for metadata extraction
Extracting metadata from an image
Practical cybersecurity applications
Limitations and privacy considerations
Try it yourself
Have I Been Pwned and breach awareness
What is Have I Been Pwned?
Checking an email address
Interpreting the results
Password exposure and the Pwned Passwords tool
Breach data and ethical OSINT
Practicing OSINT ethically and effectively
Why public doesn't always mean fair game
Navigating the ethical gray zones
Bias, emotion, and personal safety
Case study: Ethical rigor in action
Summary
Subscribe to _secpro – The Newsletter Read by Thousands of Cybersecurity Professionals
12 Web Application Pentesting: Finding and Fixing Flaws
Understanding web applications and their vulnerabilities
Why web applications are vulnerable
The web attack surface and OWASP Top 10
1. Broken access control – going where you shouldn't
2. Cryptographic failures – when the vault is protected by a toy lock
3. Injection – tricking the system with malicious input
4. Insecure design – when security gets left off the blueprint
5. Security misconfiguration – when the drawbridge is left down
6. Vulnerable and outdated components – dangerous ingredients
7. Identification and authentication failures – when logins aren't locked down
8. Software and data integrity failures – trusting a tampered delivery
9. Security logging and monitoring failures – no one watching the walls
10. Server-side request forgery – tricking the assistant
Getting your hands dirty with web application pentesting
Injection
Broken authentication
Security misconfiguration example – XXE
Broken access control
Security misconfiguration
XSS
Insecure deserialization
Using components with known vulnerabilities
Insufficient logging and monitoring
So, what's next? Exploring further and leveling up
PortSwigger Web Security Academy
TryHackMe
Packt books you might love
Keep a pentest journal
Responsible testing – what happens after you find a flaw?
Google's Vulnerability Reward Program (VRP)
GitHub's security policy
TikTok's bug bounty program
Where to start: Beginner-friendly platforms
From hobby to career – Where this path can take you
Application security (AppSec) engineer
Penetration tester (pentester)
Bug bounty hunter (freelancer)
Security analyst or researcher
Building toward that goal
Finding the Welcome mat – How real-world disclosure works
Scope isn't just a URL
A good report gets read (and rewarded)
Real reports that made an impact
Common mistakes to avoid
Where this path leads
You're already on the path
Summary
13 Cybersecurity as a Superpower: Applying Your Skills to Make a Difference
Paying it forward: Sharing cybersecurity knowledge with your community
Start where you are
Get involved locally
Make something shareable
Be a role model
Go deeper with community events
Share resources that empower
You're helping the field grow
Ethical hacking as a mindset
Roles where the ethical hacking mindset makes an impact
Technical roles that leverage hacker thinking
Infrastructure, support, and leadership roles
Communication and creative roles for hackers
Building on what you know
Tools you've already used, and where to go next
Safe platforms for skill development
Learning through structure
Finding your pathway
What lit you up?
Tap into community (revisited)
Build experience through challenges
Learn by following and sharing
Charting the next few months
Bug bounty programs: Learning through real-world experience and contributing
Programs, platforms, and scope – what you need to know now
Platforms that power the bounty world
Interpreting scope like a pro
Rules of engagement: More than just ethics
Strategic selection for beginners
Getting practical: Finding your first bugs
Start with what you know
Recon: Research before you attack
Build a methodical workflow
Note-taking is skill development
Simulate before you submit
The real payoff: Growth, not just payouts
Celebrate the small wins
Build a portfolio that speaks for you
Make real connections
Stay grounded to avoid burning out
From hunter to helper
Fostering inclusion and representing your community
Summary: Looking ahead
Subscribe to _secpro – The Newsletter Read by Thousands of Cybersecurity Professionals
14 Unlock Your Book s Exclusive Benefits
How to unlock these benefits in three easy steps
Step 1
Step 2
Step 3
Need help?
Other Books You May Enjoy
Why subscribe?
Packt is searching for authors like you
Share your thoughts
Stay Relevant in a Rapidly Changing Cybersecurity World – Join Thousands of SecPro Subscribers
Index

简介

版权

Cybersecurity Beginner's Guide