Professional Penetration Testing: Creating and Learning in a Hacking Lab
Gespeichert in:
| 1. Verfasser: | |
|---|---|
| Format: | Elektronisch E-Book |
| Sprache: | English |
| Veröffentlicht: |
Burlington
Elsevier Science
2013
|
| Schlagworte: | |
| Online-Zugang: | FAW01 FAW02 UBY01 |
| Beschreibung: | Telecommunications Front Cover; Professional Penetration Testing: Creating and Learning in a Hacking Lab; Copyright; Contents; Preface; About the Author; About the Technical Editor; Acknowledgments; Family; HackingDojo.com; On the Side; Chapter 1: Introduction; Introduction; About This Edition; Getting Setup; Performing the Penetration Test; Internal Pentesting; Personal Skills; Download Links and Support Files; HackingDojo.com; Virtual Images; Hardware Configuration Files; Summary; Chapter 2: Ethics and Hacking; Getting Permission to Hack; Code of Ethics Canons [(ISC)2]; Why Stay Ethical?; Black Hat Hackers White Hat HackersGray Hat Hackers; Ethical Standards; Certifications; Contractor; Employer; Educational and Institutional Organizations; Information Systems Security Association; Internet Activities Board; Institute of Electrical and Electronics Engineers; Organization for Economic Cooperation and Development; Computer Crime Laws; Types of Laws; Civil Law; Criminal Law; Administrative/Regulatory Law; Type of Computer Crimes and Attacks; U.S. Federal Laws; U.S. State Laws; International Laws; Canada; United Kingdom; Australia; Malaysia; Singapore; Venezuela; Safe Harbor and Directive 95/46/EC. Getting Permission to HackConfidentiality Agreement; Company Obligations; Contractor Obligations; Auditing and Monitoring; Conflict Management; Summary; References; Chapter 3: Setting up Your Lab; Introduction; Targets in a Pentest Lab; Problems with Learning to Hack; Real-World Scenarios; Turn-Key Scenarios; What Is a LiveCD?; De-ICE; Hackerdemia; Open Web Application Security Project; Virtual Network Pentest Labs; Keeping It Simple; Virtualization Software; Router configuration; Computer configuration; VM; Downloads for Virtual Network; Starting the Virtual Images Protecting Penetration Test DataEncryption Schemas; Data Encryption; Data Hashing; Securing Pentest Systems; Mobile Security Concerns; Wireless Lab Data; Advanced Pentest Labs; Hardware Considerations; Routers; Firewalls; Intrusion Detection System/Intrusion Prevention System; Hardware Configuration; De-ICE Network Challenges; Network Architecture; Operating Systems and Applications; Operating Systems; Applications; Analyzing Malware-Viruses and Worms; Virtual Versus Nonvirtual Labs; Creating a Controlled Environment; Harvesting Malware; Information Analysis; Other Target Ideas; CTF Events Web-Based ChallengesVulnerability Announcements; Summary; Reference; Chapter 4: Methodologies and Frameworks; Introduction; Information System Security Assessment Framework; Planning and Preparation-Phase I; Phase I: Planning and Preparation; Assessment-Phase II; Network Security; Host Security; Application Security; Database Security; Social Engineering; Reporting, Clean-up, and Destroy Artifacts-Phase III; Reporting; Clean-up and Destroy Artifacts; Open Source Security Testing Methodology Manual; Rules of Engagement; Channels; Human Security; Physical Security; Wireless Communications Professional Penetration Testing walks you through the entire process of setting up and running a pen test lab. Penetration testing-the act of testing a computer network to find security vulnerabilities before they are maliciously exploited-is a crucial component of information security in any organization. With this book, you will find out how to turn hacking skills into a professional career. Chapters cover planning, metrics, and methodologies; the details of running a pen test, including identifying and verifying vulnerabilities; and archiving, reporting and management practices |
| Beschreibung: | 464 pages |
| ISBN: | 9780124046184 0124046185 |
Internformat
MARC
| LEADER | 00000nmm a2200000zc 4500 | ||
|---|---|---|---|
| 001 | BV043960378 | ||
| 003 | DE-604 | ||
| 005 | 20191105 | ||
| 007 | cr|uuu---uuuuu | ||
| 008 | 161213s2013 |||| o||u| ||||||eng d | ||
| 020 | |a 9780124046184 |9 978-0-12-404618-4 | ||
| 020 | |a 0124046185 |9 0-12-404618-5 | ||
| 035 | |a (ZDB-4-EBA)ocn851970521 | ||
| 035 | |a (ZDB-4-ITC)ocn851970521 | ||
| 035 | |a (OCoLC)851970521 | ||
| 035 | |a (DE-599)BVBBV043960378 | ||
| 040 | |a DE-604 |b ger |e aacr | ||
| 041 | 0 | |a eng | |
| 049 | |a DE-1047 |a DE-1046 |a DE-706 | ||
| 082 | 0 | |a 005.8 |2 22 | |
| 100 | 1 | |a Wilhelm, Thomas |e Verfasser |4 aut | |
| 245 | 1 | 0 | |a Professional Penetration Testing |b Creating and Learning in a Hacking Lab |
| 264 | 1 | |a Burlington |b Elsevier Science |c 2013 | |
| 300 | |a 464 pages | ||
| 336 | |b txt |2 rdacontent | ||
| 337 | |b c |2 rdamedia | ||
| 338 | |b cr |2 rdacarrier | ||
| 500 | |a Telecommunications | ||
| 500 | |a Front Cover; Professional Penetration Testing: Creating and Learning in a Hacking Lab; Copyright; Contents; Preface; About the Author; About the Technical Editor; Acknowledgments; Family; HackingDojo.com; On the Side; Chapter 1: Introduction; Introduction; About This Edition; Getting Setup; Performing the Penetration Test; Internal Pentesting; Personal Skills; Download Links and Support Files; HackingDojo.com; Virtual Images; Hardware Configuration Files; Summary; Chapter 2: Ethics and Hacking; Getting Permission to Hack; Code of Ethics Canons [(ISC)2]; Why Stay Ethical?; Black Hat Hackers | ||
| 500 | |a White Hat HackersGray Hat Hackers; Ethical Standards; Certifications; Contractor; Employer; Educational and Institutional Organizations; Information Systems Security Association; Internet Activities Board; Institute of Electrical and Electronics Engineers; Organization for Economic Cooperation and Development; Computer Crime Laws; Types of Laws; Civil Law; Criminal Law; Administrative/Regulatory Law; Type of Computer Crimes and Attacks; U.S. Federal Laws; U.S. State Laws; International Laws; Canada; United Kingdom; Australia; Malaysia; Singapore; Venezuela; Safe Harbor and Directive 95/46/EC. | ||
| 500 | |a Getting Permission to HackConfidentiality Agreement; Company Obligations; Contractor Obligations; Auditing and Monitoring; Conflict Management; Summary; References; Chapter 3: Setting up Your Lab; Introduction; Targets in a Pentest Lab; Problems with Learning to Hack; Real-World Scenarios; Turn-Key Scenarios; What Is a LiveCD?; De-ICE; Hackerdemia; Open Web Application Security Project; Virtual Network Pentest Labs; Keeping It Simple; Virtualization Software; Router configuration; Computer configuration; VM; Downloads for Virtual Network; Starting the Virtual Images | ||
| 500 | |a Protecting Penetration Test DataEncryption Schemas; Data Encryption; Data Hashing; Securing Pentest Systems; Mobile Security Concerns; Wireless Lab Data; Advanced Pentest Labs; Hardware Considerations; Routers; Firewalls; Intrusion Detection System/Intrusion Prevention System; Hardware Configuration; De-ICE Network Challenges; Network Architecture; Operating Systems and Applications; Operating Systems; Applications; Analyzing Malware-Viruses and Worms; Virtual Versus Nonvirtual Labs; Creating a Controlled Environment; Harvesting Malware; Information Analysis; Other Target Ideas; CTF Events | ||
| 500 | |a Web-Based ChallengesVulnerability Announcements; Summary; Reference; Chapter 4: Methodologies and Frameworks; Introduction; Information System Security Assessment Framework; Planning and Preparation-Phase I; Phase I: Planning and Preparation; Assessment-Phase II; Network Security; Host Security; Application Security; Database Security; Social Engineering; Reporting, Clean-up, and Destroy Artifacts-Phase III; Reporting; Clean-up and Destroy Artifacts; Open Source Security Testing Methodology Manual; Rules of Engagement; Channels; Human Security; Physical Security; Wireless Communications | ||
| 500 | |a Professional Penetration Testing walks you through the entire process of setting up and running a pen test lab. Penetration testing-the act of testing a computer network to find security vulnerabilities before they are maliciously exploited-is a crucial component of information security in any organization. With this book, you will find out how to turn hacking skills into a professional career. Chapters cover planning, metrics, and methodologies; the details of running a pen test, including identifying and verifying vulnerabilities; and archiving, reporting and management practices | ||
| 650 | 7 | |a COMPUTERS / Internet / Security |2 bisacsh | |
| 650 | 7 | |a COMPUTERS / Networking / Security |2 bisacsh | |
| 650 | 7 | |a COMPUTERS / Security / General |2 bisacsh | |
| 650 | 4 | |a Computer security |x Examinations |x Practice | |
| 650 | 0 | 7 | |a Penetrationstest |0 (DE-588)4825817-9 |2 gnd |9 rswk-swf |
| 650 | 0 | 7 | |a Computersicherheit |0 (DE-588)4274324-2 |2 gnd |9 rswk-swf |
| 650 | 0 | 7 | |a Rechnernetz |0 (DE-588)4070085-9 |2 gnd |9 rswk-swf |
| 689 | 0 | 0 | |a Rechnernetz |0 (DE-588)4070085-9 |D s |
| 689 | 0 | 1 | |a Computersicherheit |0 (DE-588)4274324-2 |D s |
| 689 | 0 | 2 | |a Penetrationstest |0 (DE-588)4825817-9 |D s |
| 689 | 0 | |8 1\p |5 DE-604 | |
| 912 | |a ZDB-4-EBA |a ZDB-4-ITC | ||
| 999 | |a oai:aleph.bib-bvb.de:BVB01-029369081 | ||
| 883 | 1 | |8 1\p |a cgwrk |d 20201028 |q DE-101 |u https://d-nb.info/provenance/plan#cgwrk | |
| 966 | e | |u http://search.ebscohost.com/login.aspx?direct=true&scope=site&db=nlebk&AN=486637 |l FAW01 |p ZDB-4-EBA |q FAW_PDA_EBA |x Aggregator |3 Volltext | |
| 966 | e | |u http://search.ebscohost.com/login.aspx?direct=true&scope=site&db=nlebk&AN=486637 |l FAW02 |p ZDB-4-EBA |q FAW_PDA_EBA |x Aggregator |3 Volltext | |
| 966 | e | |u http://search.ebscohost.com/login.aspx?direct=true&scope=site&db=nlebk&AN=486637 |l UBY01 |p ZDB-4-ITC |q UBY_PDA_ITC_Kauf |x Aggregator |3 Volltext | |
Datensatz im Suchindex
| _version_ | 1804176917159477248 |
|---|---|
| any_adam_object | |
| author | Wilhelm, Thomas |
| author_facet | Wilhelm, Thomas |
| author_role | aut |
| author_sort | Wilhelm, Thomas |
| author_variant | t w tw |
| building | Verbundindex |
| bvnumber | BV043960378 |
| collection | ZDB-4-EBA ZDB-4-ITC |
| ctrlnum | (ZDB-4-EBA)ocn851970521 (ZDB-4-ITC)ocn851970521 (OCoLC)851970521 (DE-599)BVBBV043960378 |
| dewey-full | 005.8 |
| dewey-hundreds | 000 - Computer science, information, general works |
| dewey-ones | 005 - Computer programming, programs, data, security |
| dewey-raw | 005.8 |
| dewey-search | 005.8 |
| dewey-sort | 15.8 |
| dewey-tens | 000 - Computer science, information, general works |
| discipline | Informatik |
| format | Electronic eBook |
| fullrecord | <?xml version="1.0" encoding="UTF-8"?><collection xmlns="http://www.loc.gov/MARC21/slim"><record><leader>05777nmm a2200577zc 4500</leader><controlfield tag="001">BV043960378</controlfield><controlfield tag="003">DE-604</controlfield><controlfield tag="005">20191105 </controlfield><controlfield tag="007">cr|uuu---uuuuu</controlfield><controlfield tag="008">161213s2013 |||| o||u| ||||||eng d</controlfield><datafield tag="020" ind1=" " ind2=" "><subfield code="a">9780124046184</subfield><subfield code="9">978-0-12-404618-4</subfield></datafield><datafield tag="020" ind1=" " ind2=" "><subfield code="a">0124046185</subfield><subfield code="9">0-12-404618-5</subfield></datafield><datafield tag="035" ind1=" " ind2=" "><subfield code="a">(ZDB-4-EBA)ocn851970521</subfield></datafield><datafield tag="035" ind1=" " ind2=" "><subfield code="a">(ZDB-4-ITC)ocn851970521</subfield></datafield><datafield tag="035" ind1=" " ind2=" "><subfield code="a">(OCoLC)851970521</subfield></datafield><datafield tag="035" ind1=" " ind2=" "><subfield code="a">(DE-599)BVBBV043960378</subfield></datafield><datafield tag="040" ind1=" " ind2=" "><subfield code="a">DE-604</subfield><subfield code="b">ger</subfield><subfield code="e">aacr</subfield></datafield><datafield tag="041" ind1="0" ind2=" "><subfield code="a">eng</subfield></datafield><datafield tag="049" ind1=" " ind2=" "><subfield code="a">DE-1047</subfield><subfield code="a">DE-1046</subfield><subfield code="a">DE-706</subfield></datafield><datafield tag="082" ind1="0" ind2=" "><subfield code="a">005.8</subfield><subfield code="2">22</subfield></datafield><datafield tag="100" ind1="1" ind2=" "><subfield code="a">Wilhelm, Thomas</subfield><subfield code="e">Verfasser</subfield><subfield code="4">aut</subfield></datafield><datafield tag="245" ind1="1" ind2="0"><subfield code="a">Professional Penetration Testing</subfield><subfield code="b">Creating and Learning in a Hacking Lab</subfield></datafield><datafield tag="264" ind1=" " ind2="1"><subfield code="a">Burlington</subfield><subfield code="b">Elsevier Science</subfield><subfield code="c">2013</subfield></datafield><datafield tag="300" ind1=" " ind2=" "><subfield code="a">464 pages</subfield></datafield><datafield tag="336" ind1=" " ind2=" "><subfield code="b">txt</subfield><subfield code="2">rdacontent</subfield></datafield><datafield tag="337" ind1=" " ind2=" "><subfield code="b">c</subfield><subfield code="2">rdamedia</subfield></datafield><datafield tag="338" ind1=" " ind2=" "><subfield code="b">cr</subfield><subfield code="2">rdacarrier</subfield></datafield><datafield tag="500" ind1=" " ind2=" "><subfield code="a">Telecommunications</subfield></datafield><datafield tag="500" ind1=" " ind2=" "><subfield code="a">Front Cover; Professional Penetration Testing: Creating and Learning in a Hacking Lab; Copyright; Contents; Preface; About the Author; About the Technical Editor; Acknowledgments; Family; HackingDojo.com; On the Side; Chapter 1: Introduction; Introduction; About This Edition; Getting Setup; Performing the Penetration Test; Internal Pentesting; Personal Skills; Download Links and Support Files; HackingDojo.com; Virtual Images; Hardware Configuration Files; Summary; Chapter 2: Ethics and Hacking; Getting Permission to Hack; Code of Ethics Canons [(ISC)2]; Why Stay Ethical?; Black Hat Hackers</subfield></datafield><datafield tag="500" ind1=" " ind2=" "><subfield code="a">White Hat HackersGray Hat Hackers; Ethical Standards; Certifications; Contractor; Employer; Educational and Institutional Organizations; Information Systems Security Association; Internet Activities Board; Institute of Electrical and Electronics Engineers; Organization for Economic Cooperation and Development; Computer Crime Laws; Types of Laws; Civil Law; Criminal Law; Administrative/Regulatory Law; Type of Computer Crimes and Attacks; U.S. Federal Laws; U.S. State Laws; International Laws; Canada; United Kingdom; Australia; Malaysia; Singapore; Venezuela; Safe Harbor and Directive 95/46/EC.</subfield></datafield><datafield tag="500" ind1=" " ind2=" "><subfield code="a">Getting Permission to HackConfidentiality Agreement; Company Obligations; Contractor Obligations; Auditing and Monitoring; Conflict Management; Summary; References; Chapter 3: Setting up Your Lab; Introduction; Targets in a Pentest Lab; Problems with Learning to Hack; Real-World Scenarios; Turn-Key Scenarios; What Is a LiveCD?; De-ICE; Hackerdemia; Open Web Application Security Project; Virtual Network Pentest Labs; Keeping It Simple; Virtualization Software; Router configuration; Computer configuration; VM; Downloads for Virtual Network; Starting the Virtual Images</subfield></datafield><datafield tag="500" ind1=" " ind2=" "><subfield code="a">Protecting Penetration Test DataEncryption Schemas; Data Encryption; Data Hashing; Securing Pentest Systems; Mobile Security Concerns; Wireless Lab Data; Advanced Pentest Labs; Hardware Considerations; Routers; Firewalls; Intrusion Detection System/Intrusion Prevention System; Hardware Configuration; De-ICE Network Challenges; Network Architecture; Operating Systems and Applications; Operating Systems; Applications; Analyzing Malware-Viruses and Worms; Virtual Versus Nonvirtual Labs; Creating a Controlled Environment; Harvesting Malware; Information Analysis; Other Target Ideas; CTF Events</subfield></datafield><datafield tag="500" ind1=" " ind2=" "><subfield code="a">Web-Based ChallengesVulnerability Announcements; Summary; Reference; Chapter 4: Methodologies and Frameworks; Introduction; Information System Security Assessment Framework; Planning and Preparation-Phase I; Phase I: Planning and Preparation; Assessment-Phase II; Network Security; Host Security; Application Security; Database Security; Social Engineering; Reporting, Clean-up, and Destroy Artifacts-Phase III; Reporting; Clean-up and Destroy Artifacts; Open Source Security Testing Methodology Manual; Rules of Engagement; Channels; Human Security; Physical Security; Wireless Communications</subfield></datafield><datafield tag="500" ind1=" " ind2=" "><subfield code="a">Professional Penetration Testing walks you through the entire process of setting up and running a pen test lab. Penetration testing-the act of testing a computer network to find security vulnerabilities before they are maliciously exploited-is a crucial component of information security in any organization. With this book, you will find out how to turn hacking skills into a professional career. Chapters cover planning, metrics, and methodologies; the details of running a pen test, including identifying and verifying vulnerabilities; and archiving, reporting and management practices</subfield></datafield><datafield tag="650" ind1=" " ind2="7"><subfield code="a">COMPUTERS / Internet / Security</subfield><subfield code="2">bisacsh</subfield></datafield><datafield tag="650" ind1=" " ind2="7"><subfield code="a">COMPUTERS / Networking / Security</subfield><subfield code="2">bisacsh</subfield></datafield><datafield tag="650" ind1=" " ind2="7"><subfield code="a">COMPUTERS / Security / General</subfield><subfield code="2">bisacsh</subfield></datafield><datafield tag="650" ind1=" " ind2="4"><subfield code="a">Computer security</subfield><subfield code="x">Examinations</subfield><subfield code="x">Practice</subfield></datafield><datafield tag="650" ind1="0" ind2="7"><subfield code="a">Penetrationstest</subfield><subfield code="0">(DE-588)4825817-9</subfield><subfield code="2">gnd</subfield><subfield code="9">rswk-swf</subfield></datafield><datafield tag="650" ind1="0" ind2="7"><subfield code="a">Computersicherheit</subfield><subfield code="0">(DE-588)4274324-2</subfield><subfield code="2">gnd</subfield><subfield code="9">rswk-swf</subfield></datafield><datafield tag="650" ind1="0" ind2="7"><subfield code="a">Rechnernetz</subfield><subfield code="0">(DE-588)4070085-9</subfield><subfield code="2">gnd</subfield><subfield code="9">rswk-swf</subfield></datafield><datafield tag="689" ind1="0" ind2="0"><subfield code="a">Rechnernetz</subfield><subfield code="0">(DE-588)4070085-9</subfield><subfield code="D">s</subfield></datafield><datafield tag="689" ind1="0" ind2="1"><subfield code="a">Computersicherheit</subfield><subfield code="0">(DE-588)4274324-2</subfield><subfield code="D">s</subfield></datafield><datafield tag="689" ind1="0" ind2="2"><subfield code="a">Penetrationstest</subfield><subfield code="0">(DE-588)4825817-9</subfield><subfield code="D">s</subfield></datafield><datafield tag="689" ind1="0" ind2=" "><subfield code="8">1\p</subfield><subfield code="5">DE-604</subfield></datafield><datafield tag="912" ind1=" " ind2=" "><subfield code="a">ZDB-4-EBA</subfield><subfield code="a">ZDB-4-ITC</subfield></datafield><datafield tag="999" ind1=" " ind2=" "><subfield code="a">oai:aleph.bib-bvb.de:BVB01-029369081</subfield></datafield><datafield tag="883" ind1="1" ind2=" "><subfield code="8">1\p</subfield><subfield code="a">cgwrk</subfield><subfield code="d">20201028</subfield><subfield code="q">DE-101</subfield><subfield code="u">https://d-nb.info/provenance/plan#cgwrk</subfield></datafield><datafield tag="966" ind1="e" ind2=" "><subfield code="u">http://search.ebscohost.com/login.aspx?direct=true&scope=site&db=nlebk&AN=486637</subfield><subfield code="l">FAW01</subfield><subfield code="p">ZDB-4-EBA</subfield><subfield code="q">FAW_PDA_EBA</subfield><subfield code="x">Aggregator</subfield><subfield code="3">Volltext</subfield></datafield><datafield tag="966" ind1="e" ind2=" "><subfield code="u">http://search.ebscohost.com/login.aspx?direct=true&scope=site&db=nlebk&AN=486637</subfield><subfield code="l">FAW02</subfield><subfield code="p">ZDB-4-EBA</subfield><subfield code="q">FAW_PDA_EBA</subfield><subfield code="x">Aggregator</subfield><subfield code="3">Volltext</subfield></datafield><datafield tag="966" ind1="e" ind2=" "><subfield code="u">http://search.ebscohost.com/login.aspx?direct=true&scope=site&db=nlebk&AN=486637</subfield><subfield code="l">UBY01</subfield><subfield code="p">ZDB-4-ITC</subfield><subfield code="q">UBY_PDA_ITC_Kauf</subfield><subfield code="x">Aggregator</subfield><subfield code="3">Volltext</subfield></datafield></record></collection> |
| id | DE-604.BV043960378 |
| illustrated | Not Illustrated |
| indexdate | 2024-07-10T07:39:48Z |
| institution | BVB |
| isbn | 9780124046184 0124046185 |
| language | English |
| oai_aleph_id | oai:aleph.bib-bvb.de:BVB01-029369081 |
| oclc_num | 851970521 |
| open_access_boolean | |
| owner | DE-1047 DE-1046 DE-706 |
| owner_facet | DE-1047 DE-1046 DE-706 |
| physical | 464 pages |
| psigel | ZDB-4-EBA ZDB-4-ITC ZDB-4-EBA FAW_PDA_EBA ZDB-4-ITC UBY_PDA_ITC_Kauf |
| publishDate | 2013 |
| publishDateSearch | 2013 |
| publishDateSort | 2013 |
| publisher | Elsevier Science |
| record_format | marc |
| spelling | Wilhelm, Thomas Verfasser aut Professional Penetration Testing Creating and Learning in a Hacking Lab Burlington Elsevier Science 2013 464 pages txt rdacontent c rdamedia cr rdacarrier Telecommunications Front Cover; Professional Penetration Testing: Creating and Learning in a Hacking Lab; Copyright; Contents; Preface; About the Author; About the Technical Editor; Acknowledgments; Family; HackingDojo.com; On the Side; Chapter 1: Introduction; Introduction; About This Edition; Getting Setup; Performing the Penetration Test; Internal Pentesting; Personal Skills; Download Links and Support Files; HackingDojo.com; Virtual Images; Hardware Configuration Files; Summary; Chapter 2: Ethics and Hacking; Getting Permission to Hack; Code of Ethics Canons [(ISC)2]; Why Stay Ethical?; Black Hat Hackers White Hat HackersGray Hat Hackers; Ethical Standards; Certifications; Contractor; Employer; Educational and Institutional Organizations; Information Systems Security Association; Internet Activities Board; Institute of Electrical and Electronics Engineers; Organization for Economic Cooperation and Development; Computer Crime Laws; Types of Laws; Civil Law; Criminal Law; Administrative/Regulatory Law; Type of Computer Crimes and Attacks; U.S. Federal Laws; U.S. State Laws; International Laws; Canada; United Kingdom; Australia; Malaysia; Singapore; Venezuela; Safe Harbor and Directive 95/46/EC. Getting Permission to HackConfidentiality Agreement; Company Obligations; Contractor Obligations; Auditing and Monitoring; Conflict Management; Summary; References; Chapter 3: Setting up Your Lab; Introduction; Targets in a Pentest Lab; Problems with Learning to Hack; Real-World Scenarios; Turn-Key Scenarios; What Is a LiveCD?; De-ICE; Hackerdemia; Open Web Application Security Project; Virtual Network Pentest Labs; Keeping It Simple; Virtualization Software; Router configuration; Computer configuration; VM; Downloads for Virtual Network; Starting the Virtual Images Protecting Penetration Test DataEncryption Schemas; Data Encryption; Data Hashing; Securing Pentest Systems; Mobile Security Concerns; Wireless Lab Data; Advanced Pentest Labs; Hardware Considerations; Routers; Firewalls; Intrusion Detection System/Intrusion Prevention System; Hardware Configuration; De-ICE Network Challenges; Network Architecture; Operating Systems and Applications; Operating Systems; Applications; Analyzing Malware-Viruses and Worms; Virtual Versus Nonvirtual Labs; Creating a Controlled Environment; Harvesting Malware; Information Analysis; Other Target Ideas; CTF Events Web-Based ChallengesVulnerability Announcements; Summary; Reference; Chapter 4: Methodologies and Frameworks; Introduction; Information System Security Assessment Framework; Planning and Preparation-Phase I; Phase I: Planning and Preparation; Assessment-Phase II; Network Security; Host Security; Application Security; Database Security; Social Engineering; Reporting, Clean-up, and Destroy Artifacts-Phase III; Reporting; Clean-up and Destroy Artifacts; Open Source Security Testing Methodology Manual; Rules of Engagement; Channels; Human Security; Physical Security; Wireless Communications Professional Penetration Testing walks you through the entire process of setting up and running a pen test lab. Penetration testing-the act of testing a computer network to find security vulnerabilities before they are maliciously exploited-is a crucial component of information security in any organization. With this book, you will find out how to turn hacking skills into a professional career. Chapters cover planning, metrics, and methodologies; the details of running a pen test, including identifying and verifying vulnerabilities; and archiving, reporting and management practices COMPUTERS / Internet / Security bisacsh COMPUTERS / Networking / Security bisacsh COMPUTERS / Security / General bisacsh Computer security Examinations Practice Penetrationstest (DE-588)4825817-9 gnd rswk-swf Computersicherheit (DE-588)4274324-2 gnd rswk-swf Rechnernetz (DE-588)4070085-9 gnd rswk-swf Rechnernetz (DE-588)4070085-9 s Computersicherheit (DE-588)4274324-2 s Penetrationstest (DE-588)4825817-9 s 1\p DE-604 1\p cgwrk 20201028 DE-101 https://d-nb.info/provenance/plan#cgwrk |
| spellingShingle | Wilhelm, Thomas Professional Penetration Testing Creating and Learning in a Hacking Lab COMPUTERS / Internet / Security bisacsh COMPUTERS / Networking / Security bisacsh COMPUTERS / Security / General bisacsh Computer security Examinations Practice Penetrationstest (DE-588)4825817-9 gnd Computersicherheit (DE-588)4274324-2 gnd Rechnernetz (DE-588)4070085-9 gnd |
| subject_GND | (DE-588)4825817-9 (DE-588)4274324-2 (DE-588)4070085-9 |
| title | Professional Penetration Testing Creating and Learning in a Hacking Lab |
| title_auth | Professional Penetration Testing Creating and Learning in a Hacking Lab |
| title_exact_search | Professional Penetration Testing Creating and Learning in a Hacking Lab |
| title_full | Professional Penetration Testing Creating and Learning in a Hacking Lab |
| title_fullStr | Professional Penetration Testing Creating and Learning in a Hacking Lab |
| title_full_unstemmed | Professional Penetration Testing Creating and Learning in a Hacking Lab |
| title_short | Professional Penetration Testing |
| title_sort | professional penetration testing creating and learning in a hacking lab |
| title_sub | Creating and Learning in a Hacking Lab |
| topic | COMPUTERS / Internet / Security bisacsh COMPUTERS / Networking / Security bisacsh COMPUTERS / Security / General bisacsh Computer security Examinations Practice Penetrationstest (DE-588)4825817-9 gnd Computersicherheit (DE-588)4274324-2 gnd Rechnernetz (DE-588)4070085-9 gnd |
| topic_facet | COMPUTERS / Internet / Security COMPUTERS / Networking / Security COMPUTERS / Security / General Computer security Examinations Practice Penetrationstest Computersicherheit Rechnernetz |
| work_keys_str_mv | AT wilhelmthomas professionalpenetrationtestingcreatingandlearninginahackinglab |