Computing

ENGLISH

There'S A War Going On But No One Can See It

by Huib Modderkolk

16,99€ + 10% CARD

 Bloomsbury presents There's a War Going On But No One Can See It by Huib Modderkolk, read by Omar Baroud. 'A brilliant page-turner by one of Holland's finest investigative journalists' Rutger Bregman, author of Humankind 'Essential . . . What's revealed are networks of spies and criminals fighting an invisible war that involves us all' Eliot Higgins, bestselling author of We Are Bellingcat Summer 2017: computer screens go blank in 150 countries. The NHS is so affected that hospitals can only take in patients for A&E. Ambulances are grounded. Computer screens turn on spontaneously and warnings appear. Employees who desperately pull the plugs are too late. Restarting is pointless; the computers are locked. And now the attackers ask each victim for money. This is hijack software. It is just one example of how vulnerable the digital world has made us. Based on the cases he investigated over a period of six years, award-winning Dutch journalist Huib Modderkolk takes the reader on a tour of the corridors and back doors of the globalised digital world. He reconstructs British-American espionage operations and reveals how the power relationships between countries enable intelligence services to share and withhold data from each other. Looking at key players including Edward Snowden, Russian hackers Cozy Bear and Evgeniy Bogachev, 'the Pablo Escobar of the digital era', Modderkolk opens our eyes to the dark underbelly of the digital world with the narrative drive of a thriller.
ENGLISH

Nist Csf 2.0 - Your Essential Introduction To Managing Cybersecurity Risks

by Andrew Pattison

~~15,95€~~ 14,36€ 10% OFF

 A concise introduction to the NIST CSF 2.0 The NIST CSF (Cybersecurity Framework) 2.0 is designed to protect organizations from cyber attacks. Although the CSF was developed to help US organizations involved in infrastructure to systematically organize their critical activities and ensure they remain up to date, Version 2.0 states that "The CSF is designed to be used by organizations of all sizes and sectors, including industry, government, academia, and nonprofit organizations, regardless of the maturity level of their cybersecurity programs." NIST 2.0 is an effective and flexible framework that is well-known across the US, and increasingly across the rest of the world. It also aligns closely with ISO 27001 and ISO 22301, and all three standards can operate concurrently. This audiobook will help you understand how to: - Begin implementing the NIST CSF 2.0 in your organization - Build a cybersecurity program, adapt an existing one, or review existing security practices - Integrate the NIST CSF 2.0 with other frameworks such as ISO 27001 and ISO 22301 Organizations that comply with the NIST CSF 2.0, ISO 27001, and ISO 22301 demonstrate their commitment to cybersecurity to current and prospective stakeholders.
ENGLISH

Security And Cyber Laws Digital Defenders

by Soni Manish Soni

~~9,38€~~ 8,44€ 10% OFF

 <p>The increasing reliance on digital platforms Security and Cyber Laws Digital Defenders has brought significant advancements in communication, business, and daily life. However, with this rapid technological growth comes a heightened risk of cyber threats and legal challenges. As cybercrime continues to evolve, the demand for professionals well-versed in cybersecurity and cyber laws is greater than ever. This book, Security and Cyber Laws: Digital Defenders, has been meticulously designed to provide a comprehensive understanding of cybersecurity concepts, best practices, and the legal framework governing digital security.<br />Purpose and Scope<br />This book aims to serve as a complete guide for students, educators, and professionals interested in the domains of cybersecurity and cyber law. Covering fundamental principles, emerging threats, and legal regulations, it offers a structured approach to understanding both the technical and legal aspects of digital security. The content is aligned with academic curricula, ensuring readers are well-prepared for exams, certifications, and professional challenges in the field of cybersecurity.</p>
ENGLISH

Combatting Cyber Terrorism - A Guide To Understanding The Cyber Threat Landscape And Incident Response Planning

by Richard Bingley

~~34,95€~~ 31,46€ 10% OFF

 In his second book with IT Governance Publishing, Richard Bingley's Combatting Cyber Terrorism - A guide to understanding the cyber threat landscape and incident response planning analyses the evolution of cyber terrorism and what organisations can do to mitigate this threat. This book discusses: - Definitions of cyber terrorism; - Ideologies and idealisations that can lead to cyber terrorism; - How threat actors use computer systems to diversify, complicate and increase terrorist attack impacts; - The role of Big Tech and social media organisations such as X (formerly Twitter) and Instagram within the cyber threat landscape; and - How organisations can prepare for acts of cyber terrorism via security planning and incident response strategies such as ISO 31000, ISO 27001 and the NIST Cybersecurity Framework.Increasingly, cyber security practitioners are confronted with a stark phrase: cyber terrorism. For many, it conveys fear and hopelessness. What is this thing called 'cyber terrorism' and what can we begin to do about it? Malicious-minded ICT users, programmers and even programs (including much AI-powered software) have all been instrumental in recruiting, inspiring, training, executing and amplifying acts of terrorism. This has resulted in the loss of life and/or life-changing physical injuries that could never have occurred without support and facilitation from the cyber sphere. These types of attacks can be encapsulated by the phrase 'cyber terrorism'. This book recounts case studies to show the types of threats we face and provides a comprehensive coverage of risk management tactics and strategies to protect yourself against such nefarious threat actors. These include key mitigation and controls for information security or security and HR-related professionals.
ENGLISH

Cyber Resilience - Defence-In-Depth Principles

by Alan Calder

~~29,95€~~ 26,96€ 10% OFF

 We live in a world where technology and vast quantities of data play a considerable role in everyday life, both personal and professional. For the foreseeable future (and perhaps beyond), the growth and prominence of data in business shows no signs of slowing down, even if the technology in question will likely change in ways perhaps unimaginable today. Naturally, all this innovation brings huge opportunities and benefits to organisations and people alike. However, these come at more than just a financial cost. In the world as we know it, you can be attacked both physically and virtually. For today's organisations, which rely so heavily on technology - particularly the Internet - to do business, the latter attack is the far more threatening of the two. The cyber threat landscape is complex and constantly changing. For every vulnerability fixed, another pops up, ripe for exploitation. Worse, when a vulnerability is identified, a tool that can exploit it is often developed and used within hours - faster than the time it normally takes for the vendor to release a patch, and certainly quicker than the time many organisations take to install that patch. This book has been divided into two parts: - Part 1: Security principles. - Part 2: Reference controls.Part 1 is designed to give you a concise but solid grounding in the principles of good security, covering key terms, risk management, different aspects of security, defence in depth, implementation tips, and more. This part is best read from beginning to end. Part 2 is intended as a useful reference, discussing a wide range of good-practice controls (in alphabetical order) you may want to consider implementing. Each control is discussed at a high level, focusing on the broader principles, concepts and points to consider, rather than specific solutions. Each control has also been written as a stand-alone chapter, so you can just read the controls that interest you, in an order that suits you.
ENGLISH

Cyber Security Essentials - Learn The Very Basics Of Cyber Security

by Assemble You Limited

165,61€ + 10% CARD

 <![CDATA[<p><b></b></p><h4>Key Features</h4><ul><li>Learn and protect yourself against malicious software</li><li>Learn about the techniques you must use to avoid falling prey to a social engineer</li><li>Learn the techniques to protect yourself against common attacks</li></ul><h4>Book Description</h4>Malware can capture your keystrokes and send them to the person, the hacker, who planted the malware in our system. This means that if we are entering a password somewhere, let’s say in our online bank account, that person controlling the malware also gets to know it. Almost everything is visible to the hacker: our data, confidential files, photographs…almost everything.When it comes to cyber security, it''s easy to get lost in the lingo and talk. This doesn’t have to be the case! In this course, you will learn key strategies that you can immediately implement to protect yourself from malicious substances. We’ll touch on subjects like passwords, and should you be managing them, active and passive threats, social engineering and more - all geared towards keeping you safe!<h4>What you will learn</h4><ul><li>Learn how to protect yourself against malware</li><li>Learn what social engineering is, and how it’s specifically used in a cyber security context</li><li>Learn about the best-practices when it comes to making and managing passwords</li><li>Learn about the most common threats to cyber security</li><li>Learn the techniques to protect yourself against common attacks</li></ul><h4>Who this book is for</h4><p>This course is beneficial to the following anyone looking to develop a solid basic understanding of malware, how to use cybersecurity measures to limit its threat to a person or organization, and anyone looking to build a basic understanding of cyber security threats and how to deal with them.</p>]]>
ENGLISH

Risk Management And Iso 31000 - A Pocket Guide

by Alan Field

12,95€ + 10% CARD

 Risk management is a primary concern for any organisation. Its significance has only increased since the start of the COVID-19 pandemic. Organisations need to prepare for all types of threats, both probable (a server breaking down) and improbable (the office being flooded), to ensure that their operations can survive and adapt to continue with BAU (business as usual) in the face of a disaster. Yet risk management isn't solely about preventing negative outcomes, it is also about an organisation taking a known risk to uncover new opportunities to improve the organisation. For example, the transition of employees to remote working could risk an organisation's security as an employee could connect their laptop to an unsecure Wi-Fi connection. However, as demonstrated in the pandemic, remote working helped protect employees as the risk of infecting one another with COVID-19 was reduced. Read this pocket guide to understand how: - Risk-based management can prepare your organisation for future threats and therefore help the success of a BCP (business continuity plan); - To identify whether the opportunities gained from a 'risky' decision can outweigh the perceived threat; - The principles of ISO 31000 can help your organisation develop a framework for its approach to risk management; - The guidelines of ISO 31000 can be interwoven with controls in other standards such as ISO 27001 and ISO 9001; and - The organisation must continually review its approach to risk management to stay prepared for the latest threats.
ENGLISH

Iso/Iec 27001:2022 - An Introduction To Information Security And The Isms Standard

by Steve Watkins

12,95€ + 10% CARD

 Written by an acknowledged expert on the ISO/IEC 27001 Standard, ISO 27001:2022 - An Introduction to information security and the ISMS standard is an ideal primer for anyone implementing an information security management system aligned to ISO 27001:2022. The guide is a must-have resource giving a clear, concise and easy-to-read introduction to information security, providing guidance to ensure the management systems you put in place are effective, reliable and auditable. This pocket guide will help you to: - Make informed decisionsUsing this guide will enable the key employees in your organisation to make better decisions before embarking on an information security project. - Ensure everyone is up to speedThis guide will give the non-specialists on the project board and in the project team a clearer understanding of what an information security management system involves, reflecting the ISO 27001:2022 version of the Standard. - Raise awareness among staffEnsure that your staff know what is at stake with regard to information security and understand what is expected of them with this pocket guide. - Enhance your competitivenessUse this guide to begin your ISO 27001:2022 implementation journey and let your customers know that the information you hold about them is managed and protected appropriately. Get up to speed with the ISO 27001:2022 updates and keep your information secure About the author: Steve is a Director of Kinsnall Consulting Ltd, providing board-level advice on cyber security and related standards. Steve is an active member of SC 27, the international committee responsible for cyber security, information security and privacy protection standards, including the ISO 27001 family. He Chairs the UK national committee (IST 33) that mirrors SC 27 and is the Chair of the UK ISO/IEC 27001 User Group. He is also a contracted ISMS and ITSMS Technical Assessor for UKAS, supporting the assessment of certification bodies offering accredited certification to ISO/IEC 27001 and ISO/IEC 20000-1. TOC: Introduction Chapter 1: Information security - What's that? Chapter 2: It's not IT Chapter 3: ISO 27001 and the management system requirements Chapter 4: Legal, regulatory and contractual requirements and business risk Chapter 5: Information security controls Chapter 6: Certification Chapter 7: Signposting Further reading
ENGLISH

Your Face Belongs To Us - The Secretive Startup Dismantling Your Privacy

by Kashmir Hill

26,49€ + 10% CARD

 <B>*AS HEARD ON BBC RADIO 4 BOOK OF THE WEEK*<BR><BR> SHORTLISTED FOR THE ROYAL SOCIETY SCIENCE BOOK PRIZE 2024</B><BR><B>LONGLISTED FOR THE FINANCIAL TIMES BUSINESS BOOK OF THE YEAR AWARD 2023</B><BR><B>A <I>NEW STATESMAN </I>BOOK OF THE YEAR</B><BR><BR><B>'A parable for our times' </B><I>FINANCIAL TIMES, </I>Best Books of 2023<BR><BR><B>'Gripping' </B><I>THE TIMES</I>, Best Technology Books of 2023<BR> ______________________________________________________________________<BR><BR><B>What if you could be identified by anyone with just a blurry photo? </B><BR> When Kashmir Hill stumbled upon Clearview AI in 2019, a facial recognition platform with an alleged 98.6% accuracy rate, the implications were terrifying.<BR> <BR> But that was just the beginning.<BR> <BR> Clearview AI would quickly rise to the top, sharing its app with billionaires, law enforcement and even Hollywood actors. In this gripping true story, Hill dives deep into its shadowy journey, and explores how facial recognition technology is already a part of our everyday lives - and where it’s going next.<BR> ______________________________________________________________________<BR><BR><B>‘The dystopian future portrayed in some science-fiction movies is already upon us. Kashmir Hill’s fascinating book brings home the scary implications of this new reality’ </B>JOHN CARREYROU, author of <I>Bad Blood</I><BR><BR><B>'I loved this. A dark and gripping story, meticulously researched and stylishly told' </B>JENNY KLEEMAN, author of<I> Sex Robots & Vegan Meat</I><BR><BR><B>'A walk down the street will not quite feel the same again' </B><I>THE ECONOMIST</I>
ENGLISH

Operationalizing Threat Intelligence - A Guide To Developing And Operationalizing Cyber Threat Intelligence Programs

by Joseph Opacki e Kyle Wilhoit

39,74€ + 10% CARD

 <p><b>Learn cyber threat intelligence fundamentals to implement and operationalize an organizational intelligence program</b></p><h4>Key Features</h4><ul><li>Develop and implement a threat intelligence program from scratch</li><li>Discover techniques to perform cyber threat intelligence, collection, and analysis using open-source tools</li><li>Leverage a combination of theory and practice that will help you prepare a solid foundation for operationalizing threat intelligence programs</li></ul><h4>Book Description</h4><p>We''re living in an era where cyber threat intelligence is becoming more important. Cyber threat intelligence routinely informs tactical and strategic decision-making throughout organizational operations. However, finding the right resources on the fundamentals of operationalizing a threat intelligence function can be challenging, and that''s where this book helps.</p><p>In Operationalizing Threat Intelligence, you''ll explore cyber threat intelligence in five fundamental areas: defining threat intelligence, developing threat intelligence, collecting threat intelligence, enrichment and analysis, and finally production of threat intelligence. You''ll start by finding out what threat intelligence is and where it can be applied. Next, you''ll discover techniques for performing cyber threat intelligence collection and analysis using open source tools. The book also examines commonly used frameworks and policies as well as fundamental operational security concepts. Later, you''ll focus on enriching and analyzing threat intelligence through pivoting and threat hunting. Finally, you''ll examine detailed mechanisms for the production of intelligence.</p><p>By the end of this book, you''ll be equipped with the right tools and understand what it takes to operationalize your own threat intelligence function, from collection to production.</p><h4>What you will learn</h4><ul><li>Discover types of threat actors and their common tactics and techniques</li><li>Understand the core tenets of cyber threat intelligence</li><li>Discover cyber threat intelligence policies, procedures, and frameworks</li><li>Explore the fundamentals relating to collecting cyber threat intelligence</li><li>Understand fundamentals about threat intelligence enrichment and analysis</li><li>Understand what threat hunting and pivoting are, along with examples</li><li>Focus on putting threat intelligence into production</li><li>Explore techniques for performing threat analysis, pivoting, and hunting</li></ul><h4>Who this book is for</h4><p>This book is for cybersecurity professionals, security analysts, security enthusiasts, and anyone who is just getting started and looking to explore threat intelligence in more detail. Those working in different security roles will also be able to explore threat intelligence with the help of this security book.</p>
ENGLISH

Ios Forensics For Investigators - Take Mobile Forensics To The Next Level By Analyzing, Extracting, And Reporting Sensitive Evidence

by Gianluca Tiepolo

38,64€ + 10% CARD

 <p><b>Extract crucial data and lead successful criminal investigations by infiltrating every level of iOS devices</b></p><h4>Key Features</h4><ul><li>Explore free and commercial tools for carrying out data extractions and analysis for digital forensics</li><li>Learn to look for key artifacts, recover deleted mobile data, and investigate processed data</li><li>Get up and running with extracting full filesystem images and jailbreak devices to gather the most data possible</li></ul><h4>Book Description</h4><p>Professionals working in the mobile forensics industry will be able to put their knowledge to work with this practical guide to learning how to extract and analyze all available data from an iOS device.</p><p>This audiobook is a comprehensive, how-to guide that leads investigators through the process of collecting mobile devices and preserving, extracting, and analyzing data, as well as building a report. Complete with step-by-step explanations of essential concepts, practical examples, and self-assessment questions, this book starts by covering the fundamentals of mobile forensics and how to overcome challenges in extracting data from iOS devices. Once you''ve walked through the basics of iOS, you''ll learn how to use commercial tools to extract and process data and manually search for artifacts stored in database files. Next, you''ll find out the correct workflows for handling iOS devices and understand how to extract valuable information to track device usage. You''ll also get to grips with analyzing key artifacts, such as browser history, the pattern of life data, location data, and social network forensics.</p><p>By the end of this audiobook, you''ll be able to establish a proper workflow for handling iOS devices, extracting all available data, and analyzing it to gather precious insights that can be reported as prosecutable evidence.</p><h4>What you will learn</h4><ul><li>Become familiar with the mobile forensics workflow</li><li>Understand how to legally seize iOS devices and preserve their data</li><li>Extract evidence through logical and filesystem acquisitions</li><li>Perform a deep-dive analysis of user data and system data</li><li>Gain insights by analyzing third-party applications</li><li>Get to grips with gathering evidence stored on iCloud</li></ul><h4>Who this book is for</h4><p>Forensic analysts and investigators interested in extending their skills to extract data from iOS devices, including system logs, device usage, and third-party application data, will find this book useful. Anyone familiar with the principles of digital forensics and looking to expand their knowledge base in deep iOS examinations will also benefit from this book.</p><p>Knowledge of mobile forensic principles, data extraction, Unix/Linux terminal, and some hands-on understanding of databases and SQL query language is assumed.</p>
ENGLISH

Hack The Cybersecurity Interview - A Complete Interview Preparation Guide For Jumpstarting Your Cybersecurity Career

by Christophe Foulon, Ken Underhill e Tia Hopkins

30,91€ + 10% CARD

 <p><b>Get your dream job and set off on the right path to achieving success in the cybersecurity field with expert tips on preparing for interviews, understanding cybersecurity roles, and more</b></p><h4>Key Features</h4><ul><li>Get well-versed with the interview process for cybersecurity job roles</li><li>Prepare for SOC analyst, penetration tester, malware analyst, digital forensics analyst, CISO, and more roles</li><li>Understand different key areas in each role and prepare for them</li></ul><h4>Book Description</h4><p>This audiobook is a comprehensive guide that helps both entry-level and experienced cybersecurity professionals prepare for interviews in a wide variety of career areas.</p><p>Complete with the authors'' answers to different cybersecurity interview questions, this easy-to-follow and actionable audiobook will help you get ready and be confident. You''ll learn how to prepare and form a winning strategy for job interviews. In addition to this, you''ll also understand the most common technical and behavioral interview questions, learning from real cybersecurity professionals and executives with years of industry experience.</p><p>By the end of this audiobook, you''ll be able to apply the knowledge you''ve gained to confidently pass your next job interview and achieve success on your cybersecurity career path.</p><h4>What you will learn</h4><ul><li>Understand the most common and important cybersecurity roles</li><li>Focus on interview preparation for key cybersecurity areas</li><li>Identify how to answer important behavioral questions</li><li>Become well versed in the technical side of the interview</li><li>Grasp key cybersecurity role-based questions and their answers</li><li>Develop confidence and handle stress like a pro</li></ul><h4>Who this book is for</h4><p>This cybersecurity audiobook is for college students, aspiring cybersecurity professionals, computer and software engineers, and anyone looking to prepare for a job interview for any cybersecurity role. The audiobook is also for experienced cybersecurity professionals who want to improve their technical and behavioral interview skills. Recruitment managers can also use this book to conduct interviews and tests</p>
ENGLISH

Machine Learning Security Principles - Keep Data, Networks, Users, And Applications Safe From Prying Eyes

by John Paul Mueller

37,54€ + 10% CARD

 <p><b>Thwart hackers by preventing, detecting, and misdirecting access before they can plant malware, obtain credentials, engage in fraud, modify data, poison models, corrupt users, eavesdrop, and otherwise ruin your day</b></p><h4>Key Features</h4><ul><li>Discover how hackers rely on misdirection and deep fakes to fool even the best security systems</li><li>Retain the usefulness of your data by detecting unwanted and invalid modifications</li><li>Develop application code to meet the security requirements related to machine learning</li></ul><h4>Book Description</h4><p>Businesses are leveraging the power of AI to make undertakings that used to be complicated and pricy much easier, faster, and cheaper. The first part of this audiobook will explore these processes in more depth, which will help you in understanding the role security plays in machine learning.</p><p>As you progress to the second part, you''ll learn more about the environments where ML is commonly used and dive into the security threats that plague them using code, graphics, and real-world references.</p><p>The next part of the audiobook will guide you through the process of detecting hacker behaviors in the modern computing environment, where fraud takes many forms in ML, from gaining sales through fake reviews to destroying an adversary''s reputation. Once you''ve understood hacker goals and detection techniques, you''ll learn about the ramifications of deep fakes, followed by mitigation strategies.</p><p>This audiobook also takes you through best practices for embracing ethical data sourcing, which reduces the security risk associated with data. You''ll see how the simple act of removing personally identifiable information (PII) from a dataset lowers the risk of social engineering attacks.</p><p>By the end of this machine learning audiobook, you''ll have an increased awareness of the various attacks and the techniques to secure your ML systems effectively.</p><h4>What you will learn</h4><ul><li>Explore methods to detect and prevent illegal access to your system</li><li>Implement detection techniques when access does occur</li><li>Employ machine learning techniques to determine motivations</li><li>Mitigate hacker access once security is breached</li><li>Perform statistical measurement and behavior analysis</li><li>Repair damage to your data and applications</li><li>Use ethical data collection methods to reduce security risks</li></ul><h4>Who this book is for</h4><p>Whether you''re a data scientist, researcher, or manager working with machine learning techniques in any aspect, this security book is a must-have. While most resources available on this topic are written in a language more suitable for experts, this guide presents security in an easy-to-understand way, employing a host of diagrams to explain concepts to visual learners. While familiarity with machine learning concepts is assumed, knowledge of Python and programming in general will be useful.</p>
ENGLISH

Digital Forensics And Incident Response - Third Edition - Incident Response Tools And Techniques For Effective Cyber Threat Response

by Gerard Johansen

48,57€ + 10% CARD

 <p><b>Build your organization''s cyber defense system by effectively applying digital forensics, incident management, and investigation techniques to real-world cyber threats</b></p><h4>Key Features</h4><ul><li>Create a solid incident response framework and manage cyber incidents effectively</li><li>Learn to apply digital forensics tools and techniques to investigate cyber threats</li><li>Explore the real-world threat of ransomware and apply proper incident response techniques for investigation and recovery</li><h4>Book Description</h4><p>An understanding of how digital forensics integrates with the overall response to cybersecurity incidents is key to securing your organization''s infrastructure from attacks. This updated third edition will help you perform cutting-edge digital forensic activities and incident response with a new focus on responding to ransomware attacks.</p><p>After covering the fundamentals of incident response that are critical to any information security team, you''ll explore incident response frameworks. From understanding their importance to creating a swift and effective response to security incidents, the audiobook will guide you using examples. Later, you''ll cover digital forensic techniques, from acquiring evidence and examining volatile memory through to hard drive examination and network-based evidence. You''ll be able to apply these techniques to the current threat of ransomware. As you progress, you''ll discover the role that threat intelligence plays in the incident response process. You''ll also learn how to prepare an incident response report that documents the findings of your analysis. Finally, in addition to various incident response activities, the audiobook will address malware analysis and demonstrate how you can proactively use your digital forensic skills in threat hunting.</p><p>By the end of this audiobook, you''ll be able to investigate and report unwanted security breaches and incidents in your organization.</p><h4>What you will learn</h4><ul><li>Create and deploy an incident response capability within your own organization</li><li>Perform proper evidence acquisition and handling</li><li>Analyze the evidence collected and determine the root cause of a security incident</li><li>Integrate digital forensic techniques and procedures into the overall incident response process</li><li>Understand different techniques for threat hunting</li><li>Write incident reports that document the key findings of your analysis</li><li>Apply incident response practices to ransomware attacks</li><li>Leverage cyber threat intelligence to augment digital forensics findings</li><h4>Who this book is for</h4><p>This book is for cybersecurity and information security professionals who want to implement digital forensics and incident response in their organizations. You''ll also find the book helpful if you''re new to the concept of digital forensics and looking to get started with the fundamentals. A basic understanding of operating systems and some knowledge of networking fundamentals are required to get started with this book.</p>
ENGLISH

Comptia Casp+ Cas-004 Certification Guide - Develop Casp+ Skills And Learn All The Key Topics Needed To Prepare For The Certification Exam

by Mark Birch

37,54€ + 10% CARD

 <p><b>Architect, engineer, integrate, and implement security across increasingly complex, hybrid enterprise networks</b></p><h4>Key Features</h4><ul><li>Learn how to apply industry best practices and earn the CASP+ certification</li><li>Explore over 400 CASP+ questions to test your understanding of key concepts and help you prepare for the exam</li><li>Discover over 300 illustrations and diagrams that will assist you in understanding advanced CASP+ concepts</li></ul><h4>Book Description</h4><p>CompTIA Advanced Security Practitioner (CASP+) ensures that security practitioners stay on top of the ever-changing security landscape. The CompTIA CASP+ CAS-004 Certification Guide offers complete, up-to-date coverage of the CompTIA CAS-004 exam so you can take it with confidence, fully equipped to pass on the first attempt.</p><p>Written in a clear, succinct way with self-assessment questions, exam tips, and mock exams with detailed explanations, this audiobook covers security architecture, security operations, security engineering, cryptography, governance, risk, and compliance. You''ll begin by developing the skills to architect, engineer, integrate, and implement secure solutions across complex environments to support a resilient enterprise. Moving on, you''ll discover how to monitor and detect security incidents, implement incident response, and use automation to proactively support ongoing security operations. The audiobook also shows you how to apply security practices in the cloud, on-premises, to endpoints, and to mobile infrastructure. Finally, you''ll understand the impact of governance, risk, and compliance requirements throughout the enterprise.</p><p>By the end of this CASP study guide, you''ll have covered everything you need to pass the CompTIA CASP+ CAS-004 certification exam and have a handy reference guide.</p><h4>What you will learn</h4><ul><li>Understand Cloud Security Alliance (CSA) and the FedRAMP programs</li><li>Respond to Advanced Persistent Threats (APT) by deploying hunt teams</li><li>Understand the Cyber Kill Chain framework as well as MITRE ATT&CK and Diamond Models</li><li>Deploy advanced cryptographic solutions using the latest FIPS standards</li><li>Understand compliance requirements for GDPR, PCI, DSS, and COPPA</li><li>Secure Internet of Things (IoT), Industrial control systems (ICS), and SCADA</li><li>Plan for incident response and digital forensics using advanced tools<h4>Who this book is for</h4><p>This CompTIA audiobook is for CASP+ CAS-004 exam candidates who want to achieve CASP+ certification to advance their career. Security architects, senior security engineers, SOC managers, security analysts, IT cybersecurity specialists/INFOSEC specialists, and cyber risk analysts will benefit from this book. Experience in an IT technical role or CompTIA Security+ certification or equivalent is assumed.</p>
ENGLISH

Cloud Auditing Best Practices - Perform Security And It Audits Across Aws, Azure, And Gcp By Building Effective Cloud Auditing Plans

by Michael Ratemo e Shinesa Cambric

39,74€ + 10% CARD

 <p><b>Ensure compliance across the top cloud players by diving into AWS, Azure, and GCP cloud auditing to minimize security risks</b></pa><h4>Key Features</h4><ul><li>Leverage best practices and emerging technologies to effectively audit a cloud environment</li><li>Get better at auditing and unlock career opportunities in cloud audits and compliance</li><li>Explore multiple assessments of various features in a cloud environment to see how it''s done</li></ul><h4>Book Description</h4><p>As more and more companies are moving to cloud and multi-cloud environments, being able to assess the compliance of these environments properly is becoming more important. But in this fast-moving domain, getting the most up-to-date information is a challenge—so where do you turn?</p><p>Cloud Auditing Best Practices has all the information you''ll need. With an explanation of the fundamental concepts and hands-on walk-throughs of the three big cloud players, this audiobook will get you up to speed with cloud auditing before you know it.</p><p>After a quick introduction to cloud architecture and an understanding of the importance of performing cloud control assessments, you''ll quickly get to grips with navigating AWS, Azure, and GCP cloud environments. As you explore the vital role an IT auditor plays in any company''s network, you''ll learn how to successfully build cloud IT auditing programs, including using standard tools such as Terraform, Azure Automation, AWS Policy Sentry, and many more.</p><p>You''ll also get plenty of tips and tricks for preparing an effective and advanced audit and understanding how to monitor and assess cloud environments using standard tools.</p><p>By the end of this audiobook, you will be able to confidently apply and assess security controls for AWS, Azure, and GCP, allowing you to independently and effectively confirm compliance in the cloud.</p><h4>What you will learn</h4><ul><li>Understand the cloud shared responsibility and role of an IT auditor</li><li>Explore change management and integrate it with DevSecOps processes</li><li>Understand the value of performing cloud control assessments</li><li>Learn tips and tricks to perform an advanced and effective auditing program</li><li>Enhance visibility by monitoring and assessing cloud environments</li><li>Examine IAM, network, infrastructure, and logging controls</li><li>Use policy and compliance automation with tools such as Terraform</li></ul><h4>Who this book is for</h4><p>This audiobook is for IT auditors looking to learn more about assessing cloud environments for compliance, as well as those looking for practical tips on how to audit them and what security controls are available to map to IT general computing controls. Other IT professionals whose job includes assessing compliance, such as DevSecOps teams, identity, and access management analysts, cloud engineers, and cloud security architects, will also find plenty of useful information in this audiobook. Before you get started, you''ll need a basic understanding of IT systems and a solid grasp of cybersecurity basics.</p>
ENGLISH

Adversarial Tradecraft In Cybersecurity - Offense Versus Defense In Real-Time Computer Conflict

by Dan Borges

41,95€ + 10% CARD

 <p><b>Master cutting-edge techniques and countermeasures to protect your organization from live hackers. Learn how to harness cyber deception in your operations to gain an edge over the competition.</b></p><h4>Key Features</h4><ul><li>Gain an advantage against live hackers in a competition or real computing environment</li><li>Understand advanced red team and blue team techniques with code examples</li><li>Learn to battle in short-term memory, whether remaining unseen (red teams) or monitoring an attacker''s traffic (blue teams)</li></ul><h4>Book Description</h4><p>Little has been written about what to do when live hackers are on your system and running amok. Even experienced hackers tend to choke up when they realize the network defender has caught them and is zoning in on their implants in real time. This book will provide tips and tricks all along the kill chain of an attack, showing where hackers can have the upper hand in a live conflict and how defenders can outsmart them in this adversarial game of computer cat and mouse.</p><p>This book contains two subsections in each chapter, specifically focusing on the offensive and defensive teams. It begins by introducing you to adversarial operations and principles of computer conflict where you will explore the core principles of deception, humanity, economy, and more about human-on-human conflicts. Additionally, you will understand everything from planning to setting up infrastructure and tooling that both sides should have in place.</p><p>Throughout this book, you will learn how to gain an advantage over opponents by disappearing from what they can detect. You will further understand how to blend in, uncover other actors'' motivations and means, and learn to tamper with them to hinder their ability to detect your presence. Finally, you will learn how to gain an advantage through advanced research and thoughtfully concluding an operation.</p><p>By the end of this book, you will have achieved a solid understanding of cyberattacks from both an attacker''s and a defender''s perspective.</p><h4>What you will learn</h4><ul><li>Understand how to implement process injection and how to detect it</li><li>Turn the tables on the offense with active defense</li><li>Disappear on the defender''s system, by tampering with defensive sensors</li><li>Upskill in using deception with your backdoors and countermeasures including honeypots</li><li>Kick someone else from a computer you are on and gain the upper hand</li><li>Adopt a language agnostic approach to become familiar with techniques that can be applied to both the red and blue teams</li><li>Prepare yourself for real-time cybersecurity conflict by using some of the best techniques currently in the industry</li></ul><h4>Who this book is for</h4><p>Pentesters to red teamers, security operations center analysts to incident responders, attackers, defenders, general hackers, advanced computer users, and security engineers will benefit from this book. Participants in purple teaming or adversarial simulations will also learn a lot from its practical examples of processes for gaining an advantage over the opposing team.</p><p>Basic knowledge of Python, Go, Bash, PowerShell, system administration as well as knowledge of incident response in Linux and prior exposure to any kind of cybersecurity knowledge, penetration testing, and ethical hacking basics will help you follow along.</p>
ENGLISH

Cybersecurity Career Master Plan - Proven Techniques And Effective Tips To Help You Advance In Your Cybersecurity Career

by Dr. Gerald Auger, Jaclyn &Quote;Jax&Quote; Scott e Jonathan Helmus

27,60€ + 10% CARD

 <p><b>Start your Cybersecurity career with expert advice on how to get certified, find your first job, and progress</b></p><h4>Key Features</h4><ul><li>Learn how to follow your desired career path that results in a well-paid, rewarding job in cybersecurity</li><li>Explore expert tips relating to career growth and certification options</li><li>Access informative content from a panel of experienced cybersecurity experts</li></ul><h4>Book Description</h4><p>Cybersecurity is an emerging career trend and will continue to become increasingly important. Despite the lucrative pay and significant career growth opportunities, many people are unsure of how to get started.</p><p>This audiobook is designed by leading industry experts to help you enter the world of cybersecurity with confidence, covering everything from gaining the right certification to tips and tools for finding your first job. The audiobook starts by helping you gain a foundational understanding of cybersecurity, covering cyber law, cyber policy, and frameworks. Next, you''ll focus on how to choose the career field best suited to you from options such as security operations, penetration testing, and risk analysis. The audiobook also guides you through the different certification options as well as the pros and cons of a formal college education versus formal certificate courses. Later, you''ll discover the importance of defining and understanding your brand. Finally, you''ll get up to speed with different career paths and learning opportunities.</p><p>By the end of this cyber audiobook, you will have gained the knowledge you need to clearly define your career path and develop goals relating to career progression.</p><h4>What you will learn</h4><ul><li>Gain an understanding of cybersecurity essentials, including the different frameworks and laws, and specialties</li><li>Find out how to land your first job in the cybersecurity industry</li><li>Understand the difference between college education and certificate courses</li><li>Build goals and timelines to encourage a work/life balance while delivering value in your job</li><li>Understand the different types of cybersecurity jobs available and what it means to be entry-level</li><li>Build affordable, practical labs to develop your technical skills</li><li>Discover how to set goals and maintain momentum after landing your first cybersecurity job</li></ul><h4>Who this book is for</h4><p>This audiobook is for college graduates, military veterans transitioning from active service, individuals looking to make a mid-career switch, and aspiring IT professionals. Anyone who considers cybersecurity as a potential career field but feels intimidated, overwhelmed, or unsure of where to get started will also find this book useful. No experience or cybersecurity knowledge is needed to get started.</p>
ENGLISH

Cissp:Cybersecurity Governance And Risk Management - Policy Concepts & Deployment Within Organizational Security

by Miller Richie Miller

12,83€ + 10% CARD

 <p>If you want to become a Cybersecurity Professional, this book is for you!</p><br /><p><br />IT Security jobs are on the rise! Small, medium or large size companies are always on the look out to get on board bright individuals to provide their services for Business as Usual (BAU) tasks or deploying new as well as on-going company projects. Most of these jobs requiring you to be on site but since 2020, companies are willing to negotiate with you if you want to work from home (WFH). Yet, to pass the Job interview, you must have experience. Still, if you think about it, all current IT security professionals at some point had no experience whatsoever. The question is; how did they get the job with no experience? Well, the answer is simpler then you think. All you have to do is convince the Hiring Manager that you are keen to learn and adopt new technologies and you have willingness to continuously research on the latest upcoming methods and techniques revolving around IT security. Here is where this book comes into the picture. Why? Well, if you want to become an IT Security professional, this book is for you! If you are studying for CompTIA Security+ or CISSP, this book will help you pass your exam. Passing security exams isn’t easy. In fact, due to the raising security beaches around the World, both above mentioned exams are becoming more and more difficult to pass. Whether you want to become an Infrastructure Engineer, IT Security Analyst or any other Cybersecurity Professional, this book (as well as the other books in this series) will certainly help you get there!</p><br /><p>BUY THIS BOOK NOW AND GET STARTED TODAY!</p><br /><p>In this book you will discover:<br />Threat Types & Access Control<br />Applicable Regulations, Standards, & Frameworks<br />Benchmarks & Secure Configuration Guides<br />How to Implement Policies for Organizational Security<br />Monitoring & Balancing<br />Awareness & Skills Training<br />Technology & Vendor Diversity<br />Change Management & Asset Management<br />Risk Management Process and Concepts<br />Risk Register, Risk Matrix, and Heat Map<br />Regulatory Examples<br />Qualitative and Quantitative Analysis<br />Business Impact Analysis<br />Identification of Critical Systems<br />Order of Restoration<br />Continuity of Operations<br />Privacy and Sensitive Data Concepts<br />Incident Notification and Escalation<br />Data Classification<br />Privacy-enhancing Technologies<br />Data Owners & Responsibilities<br />Information Lifecycle</p><br /><p>BUY THIS BOOK NOW AND GET STARTED TODAY!</p>
ENGLISH

Cyber Security: Essential Principles To Secure Your Organisation

by Alan Calder

10,98€ + 10% CARD

 Cyber Security - Essential principles to secure your organisation takes you through the fundamentals of cyber security, the principles that underpin it, vulnerabilities and threats, and how to defend against attacks.Organisations large and small experience attacks every day, from simple phishing emails to intricate, detailed operations masterminded by criminal gangs, and for every vulnerability fixed, another pops up, ripe for exploitation.Cyber security doesn't have to cost vast amounts of money or take a short ice age to implement. No matter the size of your organisation, improving cyber security helps protect your data and that of your clients, improving business relations and opening the door to new opportunities.This pocket guide will take you through the essentials of cyber security - the principles that underpin it, vulnerabilities and threats and the attackers who use them, and how to defend against them - so you can confidently develop a cyber security programme.Cyber Security - Essential principles to secure your organisation:Covers the key differences between cyber and information security;Explains how cyber security is increasingly mandatory and how this ties into data protection, e.g. the Data Protection Act 2018 and the GDPR (General Data Protection Regulation);Focuses on the nature of the problem, looking at technical, physical and human threats and vulnerabilities;Explores the importance of security by design;Gives guidance on why security should be balanced and centralised; andIntroduces the concept of using standards and frameworks to manage cyber security.No matter the size of your organisation, cyber security is no longer optional - it is an essential component of business success and a critical defence against the risks of the information age. The only questions left are to decide when and where your journey will begin.Start that journey now - buy this book today!
ENGLISH

Wires Of War - Technology And The Global Struggle For Power

by Jacob Helberg

29,80€ + 10% CARD

 <b>From the former news policy lead at Google, an "informative and often harrowing wake-up call" (<i>Publishers Weekly</i>) that explains the high-stakes global cyberwar brewing between Western democracies and the authoritarian regimes of China and Russia that could potentially crush democracy.</b><BR><BR>From 2016 to 2020, Jacob Helberg led Google’s global internal product policy efforts to combat disinformation and foreign interference. During this time, he found himself in the midst of what can only be described as a quickly escalating two-front technology cold war between democracy and autocracy.<BR> <BR>On the front-end, we’re fighting to control the software—applications, news information, social media platforms, and more—of what we see on the screens of our computers, tablets, and phones, a clash which started out primarily with Russia but now increasingly includes China and Iran. Even more ominously, we’re also engaged in a hidden back-end battle—largely with China—to control the internet’s hardware, which includes devices like cellular phones, satellites, fiber-optic cables, and 5G networks.<BR> <BR>This tech-fueled war will shape the world’s balance of power for the coming century as autocracies exploit 21st-century methods to redivide the world into 20th-century-style spheres of influence. Without a firm partnership with the government, Silicon Valley is unable to protect democracy from the autocrats looking to sabotage it from Beijing to Moscow and Tehran. Helberg offers "unnervingly convincing evidence that time is running out in the ‘gray war’ with the enemies of freedom" (<i>Kirkus Reviews</i>) which could affect every meaningful aspect of our lives, including our economy, our infrastructure, our national security, and ultimately, our national sovereignty.
ENGLISH

Cyberdeterrence And Cyberwar

by Martin C. Libicki

15,41€ + 10% CARD

 <p>The protection of cyberspace, the information medium, has become a vital national interest because of its importance both to the economy and to military power. An attacker may tamper with networks to steal information for money or to disrupt operations. Future wars are likely to be carried out, in part or perhaps entirely, in cyberspace. It might seem that maneuvering in cyberspace is like maneuvering in other media, but nothing would be more misleading. Cyberspace has its own laws. It is easy to hide identities and difficult to predict or even understand battle damage, and attacks deplete themselves quickly. Cyberwar is nothing so much as the manipulation of ambiguity.</p><p>Martin Libicki explores these topics in detail and uses the results to address such issues as the pros and cons of counterattack, the value of deterrence and vigilance, and other defensive actions the United States and the US Air Force can take in the face of deliberate cyberattack.</p>
ENGLISH

Iso27001/Iso27002:2013 - A Pocket Guide

by Alan Calder

10,98€ + 10% CARD

 Protect your organisation's information assets using ISO27001:2013Information is one of your organisation's most important resources. Keeping that information secure is therefore vital to your business. This handy pocket guide is an essential overview of two key information security standards that cover the formal requirements (ISO27001:2013) for creating an Information Security Management System (ISMS), and the best-practice recommendations (ISO27002:2013) for those responsible for initiating, implementing or maintaining it.Furthering the objectives of your organisationInformation security means much more than a technology solution, and requires buy-in from senior managers and the collaboration of all staff in the organisation. For this reason, ISO27001 is not a one-size-fits-all solution, nor is it designed to be a static, fixed entity. By looking at ISO27001 and ISO27002 together, this pocket guide gives a wider view of what it means to implement an ISO27001 ISMS.Creating an ISMS based on ISO27001/ISO27002 will help you to:improve efficiency by having systems and procedures in place, enabling you to focus more on your core businessprotect your information assets from a wide range of cyber threats such as criminal activity and fraud, user errors, outside attack, insider compromise and system failuremanage risk systematically and put in place a plan to eliminate or reduce cyber threats to your organisationprepare for the worst, as ISO27001 requires you to monitor information security events, enabling earlier detection of threats or processing errors, and faster resolution.Completely up to date with the latest 2013 release of ISO27001, ISO27001/ISO27002: A Pocket Guide covers:the ISO/IEC 27000:2013 family of information security standardsbackground to the standards certification processthe ISMS and ISO27001:2013specification vs. code of practicedocumentation and recordsmanagement responsibilitypolicy and scoperisk assessmentimplementationcontinual improvement.Buy this pocket guide and start securing your information assets today
ENGLISH

Security In The Digital World

by Graham Day

14,30€ + 10% CARD

 "Love the fact that it jumped in with 10 top tips for security, a great opening to the book Excellent section on phishing emails/vishing/smishing, with great practical examples "Christopher Wright, Wright-CandA Consulting LtdProtect yourself from cyber threats and risksCyberspace, the Internet, computer networks, the digital world - call it what you will - is always developing. And so are the threats and risks of being online.Security in the Digital Worldexplains the common digital threats to home users, home offices, mobile users, consumers and parents alike, as well as providing tips, advice and guidance. It doesn't matter if you are working in the most mature enterprise environment, unemployed, retired or still at school, whether you often have a smartphone in your hand or only use an e-reader, you are at risk.Security in the Digital Worldis a straightforward guide for the home user, parent, consumer and home office, providing a fountain of knowledge for modern security needs. It gives an overview of who conducts cyber attacks any why, and where cyber threats come from. It also explains what you can do to protect yourself and others, and provides a personal cyber security risk assessment.Deeper insight into threats in the digital worldThis must-have guide gives up-to-date information on consumer risks and provides:Ten tips to keep your digital information secure;Understanding and awareness of information security and cyber threats;Explanations of what social engineering is and techniques used by cyber criminals;Advice on what to look out for online and your rights as a consumer; andGuidance on common threats in the digital age, including malware, social engineering and ransomware.There is little technical knowledge or skill needed to understand and apply the book's tips and advice, and there are lots of images to help guide you.From the top ten tips and the breakdown of consumer risks, to social networking and parental security, this book is an essential guide for anyone and everyone trying to stay safe and secure in the evolving digital world.About the authorGraham Day spent 24 years in the military, including more than a decade as a counter-intelligence and security specialist on operational deployments around the world.Since retiring from the military, Graham has provided a range of services as a consultant, including, but not limited to, information security, cyber security , business continuity, cyber risk and cyber resilience.He is a CESG Certified Professional Security Information Risk Advisor, a Certified Information Systems Security Professional, and a member of the Author Group for British Standard 31111 Cyber Risk & Resilience.
Loading results...

View more results

Shopping Cart

/ Information Security