UID:
almahu_9949568092102882
Format:
1 online resource :
,
illustrations
Edition:
First edition.
ISBN:
9781003426134
,
1003426131
,
9781000922387
,
1000922383
,
9781000922394
,
1000922391
Series Statement:
River publishers series in security and digital forensics
Content:
Cyber security is one of the most critical problems faced by enterprises, government organizations, education institutes, small and medium scale businesses, and medical institutions today. Creating a cyber security posture through proper cyber security architecture, deployment of cyber defense tools, and building a security operation center are critical for all such organizations given the preponderance of cyber threats. However, cyber defense tools are expensive, and many small and medium-scale business houses cannot procure these tools within their budgets. Even those business houses that manage to procure them cannot use them effectively because of the lack of human resources and the knowledge of the standard enterprise security architecture. In 2020, the C3i Center at the Indian Institute of Technology Kanpur developed a professional certification course where IT professionals from various organizations go through rigorous six-month long training in cyber defense. During their training, groups within the cohort collaborate on team projects to develop cybersecurity solutions for problems such as malware analysis, threat intelligence collection, endpoint detection and protection, network intrusion detection, developing security incidents, event management systems, etc. All these projects leverage open-source tools, and code from various sources, and hence can be also constructed by others if the recipe to construct such tools is known. It is therefore beneficial if we put these recipes out in the form of book chapters such that small and medium scale businesses can create these tools based on open-source components, easily following the content of the chapters. In 2021, we published the first volume of this series based on the projects done by cohort 1 of the course. This volume, second in the series has new recipes and tool development expertise based on the projects done by cohort 3 of this training program. This volume consists of nine chapters that describe experience and know-how of projects in malware analysis, web application security, intrusion detection system, and honeypot in sufficient detail so they can be recreated by anyone looking to develop home grown solutions to defend themselves from cyber-attacks.
Note:
〈P〉PART ONE: 〈B〉Web Application Security 〈/B〉〈/P〉〈P〉1. OWASP G0rking -- Exploiting the Hidden Aspects of Google's Search Capabilities〈/P〉〈I〉〈P〉Vishal Soni and Neelakshi Sahni〈/P〉〈/I〉〈P〉 2. OSS Known Vulnerability Scanner -- Helping Software Developers Detect Third Party Dependency Vulnerabilities in Real Time 〈/P〉〈I〉〈P〉Om Mishra and Ria Sarkar〈/P〉〈/I〉〈P〉PART TWO: 〈B〉Malware Analysis〈/P〉〈/B〉〈P〉3. Detecting Malware using Machine Learning 〈/P〉〈I〉〈P〉Partha Majumdar, Shyava Tripathi, Balaji Annamalai, Senthil Jagadeesan, and Ranveer Khedar〈/P〉〈/I〉〈P〉4. New Age Attack Vectors -- JPEG Images Machine Learning Based Solution for the Detection of Malicious JPEG Images〈/P〉〈I〉〈P〉Shankar Kashamshetty and Kunal Chawla〈/P〉〈/I〉〈P〉 5. Live Monitoring of Malware Attacks on Cloud using a Windows Agent-Based Solution 6. Malware Too Needs Attention〈/P〉〈I〉〈P〉Sheetal A. Suvarna〈/P〉〈/I〉〈P〉PART THREE: 〈B〉IDS〈/P〉〈/B〉〈P〉 7. Implementation of Intrusion Detection System and Deception Technologies using Open-Source Tools for Small Business 〈/P〉〈I〉〈P〉Purushartha Srivastava and Kalpesh Seludkar〈/P〉〈/I〉〈P〉8. Attack Vector Analysis with New Benchmark〈/P〉〈I〉〈P〉Ashish Ranjan Yadav and Rohit Negi〈/P〉〈/I〉〈P〉 9. Stealpot Honeypot Network〈/P〉〈I〉〈P〉Amardeep, Om Prakash Mishra and Sanjeev Kumar Sumbria〈/P〉〈/I〉
Additional Edition:
Print version : ISBN 9788770227957
Language:
English
DOI:
10.1201/9781003426134
URL:
https://www.taylorfrancis.com/books/9781003426134
