Cloud Penetration Testing for Red Teamers: Learn how to effectively pentest AWS, Azure, and GCP applications
暫譯: 紅隊雲端滲透測試:學習如何有效地對 AWS、Azure 和 GCP 應用進行滲透測試
Crawley, Kim
- 出版商: Packt Publishing
- 出版日期: 2023-11-24
- 售價: $2,050
- 貴賓價: 9.5 折 $1,948
- 語言: 英文
- 頁數: 298
- 裝訂: Quality Paper - also called trade paper
- ISBN: 1803248483
- ISBN-13: 9781803248486
-
相關分類:
Amazon Web Services、Microsoft Azure、Penetration-test
海外代購書籍(需單獨結帳)
相關主題
商品描述
Get to grips with cloud exploits, learn the fundamentals of cloud security, and secure your organization's network by pentesting AWS, Azure, and GCP effectively
Key Features:
- Discover how enterprises use AWS, Azure, and GCP as well as the applications and services unique to each platform
- Understand the key principles of successful pentesting and its application to cloud networks, DevOps, and containerized networks (Docker and Kubernetes)
- Get acquainted with the penetration testing tools and security measures specific to each platform
- Purchase of the print or Kindle book includes a free PDF eBook
Book Description:
With AWS, Azure, and GCP gaining prominence, mastering their unique features, ecosystems, and penetration testing protocols has become an indispensable skill, which is precisely what this pentesting guide for cloud platforms will help you achieve. As you navigate through the chapters, you'll explore the intricacies of cloud security testing and gain valuable insights into how pentesters and red teamers evaluate cloud environments effectively.
In addition to its coverage of these cloud platforms, the book also guides you through modern methodologies for testing containerization technologies such as Docker and Kubernetes, which are fast becoming staples in the cloud ecosystem. Additionally, it places extended focus on penetration testing AWS, Azure, and GCP through serverless applications and specialized tools. These sections will equip you with the tactics and tools necessary to exploit vulnerabilities specific to serverless architecture, thus providing a more rounded skill set.
By the end of this cloud security book, you'll not only have a comprehensive understanding of the standard approaches to cloud penetration testing but will also be proficient in identifying and mitigating vulnerabilities that are unique to cloud environments.
What You Will Learn:
- Familiarize yourself with the evolution of cloud networks
- Navigate and secure complex environments that use more than one cloud service
- Conduct vulnerability assessments to identify weak points in cloud configurations
- Secure your cloud infrastructure by learning about common cyber attack techniques
- Explore various strategies to successfully counter complex cloud attacks
- Delve into the most common AWS, Azure, and GCP services and their applications for businesses
- Understand the collaboration between red teamers, cloud administrators, and other stakeholders for cloud pentesting
Who this book is for:
This book is for pentesters, aspiring pentesters, and red team members seeking specialized skills for leading cloud platforms-AWS, Azure, and GCP. Those working in defensive security roles will also find this book useful to extend their cloud security skills.
商品描述(中文翻譯)
掌握雲端漏洞,學習雲端安全的基本原則,並有效地透過滲透測試保護您組織的網路,涵蓋 AWS、Azure 和 GCP
主要特點:
- 了解企業如何使用 AWS、Azure 和 GCP,以及每個平台獨特的應用程式和服務
- 理解成功滲透測試的關鍵原則及其在雲端網路、DevOps 和容器化網路(Docker 和 Kubernetes)中的應用
- 熟悉每個平台特有的滲透測試工具和安全措施
- 購買印刷版或 Kindle 書籍可獲得免費 PDF 電子書
書籍描述:
隨著 AWS、Azure 和 GCP 的日益重要,掌握它們獨特的功能、生態系統和滲透測試協議已成為一項不可或缺的技能,而這正是本書針對雲端平台的滲透測試指南所能幫助您達成的目標。在各章中,您將探索雲端安全測試的複雜性,並獲得有關滲透測試者和紅隊成員如何有效評估雲端環境的寶貴見解。
除了涵蓋這些雲端平台外,本書還指導您測試容器化技術(如 Docker 和 Kubernetes)的現代方法,這些技術正迅速成為雲端生態系統的主流。此外,本書特別著重於透過無伺服器應用程式和專用工具對 AWS、Azure 和 GCP 進行滲透測試。這些部分將為您提供必要的策略和工具,以利用無伺服器架構特有的漏洞,從而提供更全面的技能組合。
在本書結束時,您不僅將全面了解雲端滲透測試的標準方法,還將熟練識別和減輕雲端環境中獨特的漏洞。
您將學到的內容:
- 熟悉雲端網路的演變
- 導航並保護使用多個雲端服務的複雜環境
- 進行漏洞評估以識別雲端配置中的弱點
- 透過學習常見的網路攻擊技術來保護您的雲端基礎設施
- 探索各種策略以成功應對複雜的雲端攻擊
- 深入了解最常見的 AWS、Azure 和 GCP 服務及其在商業中的應用
- 理解紅隊成員、雲端管理員和其他利益相關者在雲端滲透測試中的合作
本書適合誰:
本書適合滲透測試者、渴望成為滲透測試者的專業人士以及尋求專業技能的紅隊成員,專注於主要雲端平台 AWS、Azure 和 GCP。從事防禦安全角色的人士也會發現本書對擴展其雲端安全技能非常有用。