《黑客：下一代》——N.Dhanjani, B.Rios, B.Hardin
需积分: 10 195 浏览量
更新于2024-07-26
收藏 6.88MB PDF 举报
"黑客：下一代".(Hacking：The.Next.Generation).N.Dhanjani&B.Rios&B.Hardin
《黑客：下一代》是由Nitesh Dhanjani、Billy Rios和Brett Hardin三位专家合著的一本关于网络安全与黑客技术的专业书籍。这本书主要探讨了黑客技术的最新发展和未来趋势，揭示了新一代黑客攻击手段和防御策略。
书中涵盖了多个关键知识点：
1. 黑客技术的演进：作者详细阐述了黑客技术从早期的基础破解到现代的高级网络渗透的演变过程，强调了随着科技的发展，黑客工具和技巧也在不断升级。
2. 漏洞发现与利用：书中深入讲解了如何发现和利用软件漏洞，包括零日漏洞（Zero-Day Exploits），以及如何在安全研究中遵循道德规范。
3. 社会工程学：讨论了社会工程学在黑客攻击中的角色，包括通过欺骗和操纵信息来获取敏感数据的方法。
4. 物联网（IoT）安全：鉴于物联网设备的普及，书中分析了这些设备可能面临的新型安全威胁，并提供了预防和应对措施。
5. 工业控制系统（ICS）安全：针对关键基础设施的保护，探讨了如何防止黑客对电力、交通等关键系统进行攻击。
6. 隐私保护与数据安全：讨论了个人隐私的保护方法，以及如何在大数据时代保障数据的安全性。
7. 应急响应与灾难恢复：介绍了在遭受攻击后的应急处理流程，包括数据恢复、系统修复和业务连续性计划。
8. 法律与伦理：强调了网络安全研究的法律边界，以及作为一名安全专业人员应遵循的道德准则。
9. 安全编程与开发实践：提供了编写更安全代码的指导，帮助开发者减少应用的漏洞。
10. 持续监控与威胁情报：讨论了实时监控网络活动的重要性，以及如何利用威胁情报来预防潜在攻击。
此外，书中的案例研究和实战演练部分为读者提供了实践操作的参考，使读者能够更好地理解和应对网络安全挑战。该书不仅是网络安全专业人士的重要参考资料，也适合对黑客技术和网络防御感兴趣的广大读者。通过阅读本书，读者可以深入了解黑客的思维方式，提高自身的网络安全意识和防护能力。
CHAPTER 1
Intelligence Gathering: Peering
Through the Windows to Your
Organization
To successfully execute an attack against an organization, the attacker must first per-
form reconnaissance to gather as much intelligence about the organization as possible.
Many traditional methods for gaining intelligence about targets still work today, such
as dumpster diving, querying public databases, and querying search engines. However,
new methods that rely on gathering information from technologies such as social net-
working applications are becoming more commonplace. In this chapter, we will discuss
the traditional methods as well as how the new generation of attackers is able to abuse
new technologies to gather information.
From the attacker’s point of view, it is extremely important to perform reconnaissance
as surreptitiously as possible. Since information gathering is one of the first steps the
attacker may perform, he must take care not to do anything that may alert the target.
The techniques in this chapter will therefore concentrate on methods that allow an
attacker to gather information without sending a single network packet toward the
target.
Information gathered during reconnaissance always ends up aiding the attacker in some
way, even if it isn’t clear early on how the information is useful. Attackers want to obtain
as much information about their target as possible, knowing that the data they collect,
if not immediately useful, will most likely be useful in later stages of the attack.
Physical Security Engineering
Gathering information through physical means is a traditional tactic that attackers have
been using for a while now. Some examples of information that an attacker can obtain
from these methods include network diagrams, financial information, floor plans,
1
剩余296页未读，继续阅读
2011-09-14 上传
2010-04-07 上传
点击了解资源详情
2021-05-27 上传
2021-02-16 上传
2019-05-21 上传
299 浏览量
2011-06-08 上传
