Get to grips with cloud exploits, learn the fundamentals of cloud security, and secure your organization's network by pentesting AWS, Azure, and GCP effectively
Key Features
Discover how enterprises use AWS, Azure, and GCP as well as the applications and services unique to each platform
Understand the key principles of successful pentesting and its application to cloud networks, DevOps, and containerized networks (Docker and Kubernetes)
Get acquainted with the penetration testing tools and security measures specific to each platform
Purchase of the print or Kindle book includes a free PDF eBook
Book DescriptionWith AWS, Azure, and GCP gaining prominence, understanding their unique features, ecosystems, and penetration testing protocols has become an indispensable skill, which is precisely what this pentesting guide for cloud platforms will help you achieve. As you navigate through the chapters, you'll explore the intricacies of cloud security testing and gain valuable insights into how pentesters evaluate cloud environments effectively.
In addition to its coverage of these cloud platforms, the book also guides you through modern methodologies for testing containerization technologies such as Docker and Kubernetes, which are fast becoming staples in the cloud ecosystem. Additionally, it places extended focus on penetration testing AWS, Azure, and GCP through serverless applications and specialized tools. These sections will equip you with the tactics and tools necessary to exploit vulnerabilities specific to serverless architecture, thus providing a more rounded skill set.
By the end of this cloud security book, you'll not only have a comprehensive understanding of the standard approaches to cloud penetration testing but will also be proficient in identifying and mitigating vulnerabilities that are unique to cloud environments.What you will learn
Familiarize yourself with the evolution of cloud networks
Navigate and secure complex environments that use more than one cloud service
Conduct vulnerability assessments to identify weak points in cloud configurations
Secure your cloud infrastructure by learning about common cyber attack techniques
Explore various strategies to successfully counter complex cloud attacks
Delve into the most common AWS, Azure, and GCP services and their applications for businesses
Understand the collaboration between red teamers, cloud administrators, and other stakeholders for cloud pentesting
Who this book is forThis book is for aspiring Penetration Testers, and the Penetration Testers seeking specialized skills for leading cloud platforms-AWS, Azure, and GCP. Those working in defensive security roles will also find this book useful to extend their cloud security skills.
Sprache
Verlagsort
Zielgruppe
Maße
Höhe: 235 mm
Breite: 191 mm
Dicke: 16 mm
Gewicht
ISBN-13
978-1-80324-848-6 (9781803248486)
Copyright in bibliographic data and cover images is held by Nielsen Book Services Limited or by the publishers or by their respective licensors: all rights reserved.
Schweitzer Klassifikation
Kim Crawley is a thought leader in cybersecurity, from pentesting to defensive security, and from policy to cyber threat research. For nearly a decade, she has contributed her research and writing to the official corporate blogs of AT&T Cybersecurity, BlackBerry, Venafi, Sophos, CloudDefense, and many others. She has been an internal employee of both Hack The Box and IOActive, a leading cybersecurity research firm.
With the hacker mindset, she hacked her way into various information security subject matters. She co-authored one of the most popular guides to pentester careers on Amazon, The Pentester Blueprint, with Philip Wylie for Wiley Tech. She wrote an introductory guide to cybersecurity for business, 8 Steps to Better Security, which was also published by Wiley Tech. She also wrote Hacker Culture: A to Z for O'Reilly Media.
To demonstrate her knowledge of cybersecurity operations, she passed her CISSP exam in 2023. In her spare time, she loves playing Japanese RPGs and engaging in social justice advocacy. She's always open to new writing, research, and security practitioner opportunities.
Table of Contents
How Do Enterprises Utilize and Implement Cloud Networks?
How Are Cloud Networks Cyber Attacked?
Key Concepts for Pentesting Today's Cloud Networks
Security Features in AWS
Pentesting AWS Features through Serverless Applications and Tools
Pentesting Containerized Applications in AWS
Security Features in Azure
Pentesting Azure Features through Serverless Applications and Tools
Pentesting Containerized Applications in Azure
Security Features in GCP
Pentesting GCP Features through Serverless Applications and Tools
Pentesting Containerized Applications in GCP
Best Practices and Summary
