Attribution of advanced persistent threats : how to identify the actors behind cyber-espionage / Timo Steffens.
An increasing number of countries develop capabilities for cyber-espionage and sabotage. The sheer number of reported network compromises suggests that some of these countries view cyber-means as integral and well-established elements of their strategical toolbox. At the same time the relevance of s...
Saved in:
Online Access: |
Full Text (via Skillsoft) |
---|---|
Main Author: | |
Format: | Electronic eBook |
Language: | English German |
Published: |
Berlin, Germany :
Springer Vieweg,
[2020]
|
Subjects: |
MARC
LEADER | 00000cam a2200000 i 4500 | ||
---|---|---|---|
001 | b12301386 | ||
006 | m o d | ||
007 | cr ||||||||||| | ||
008 | 200730s2020 gw ob 001 0 eng d | ||
005 | 20231215081412.0 | ||
015 | |a GBC0C3837 |2 bnb | ||
016 | 7 | |a 019852663 |2 Uk | |
019 | |a 1184041122 | ||
020 | |a 9783662613139 |q (electronic bk.) | ||
020 | |a 3662613131 |q (electronic bk.) | ||
020 | |z 3662613123 | ||
020 | |z 9783662613122 | ||
024 | 7 | |a 10.1007/978-3-662-61313-9 |2 doi | |
029 | 1 | |a AU@ |b 000067597893 | |
029 | 1 | |a UKMGB |b 019852663 | |
035 | |a (OCoLC)sks1178785451 | ||
035 | |a (OCoLC)1178785451 |z (OCoLC)1184041122 | ||
037 | |a sks154859 | ||
040 | |a YDX |b eng |e rda |e pn |c YDX |d YDXIT |d N$T |d GW5XE |d DKU |d UKMGB |d OCLCF |d UKAHL |d WAU |d OCLCQ |d OCLCO |d LUU |d UND |d OCLCQ |d OCLCO | ||
041 | 1 | |a eng |h ger | |
049 | |a GWRE | ||
050 | 4 | |a QA76.9.A25 |b S74 2020 | |
100 | 1 | |a Steffens, Timo, |e author. | |
245 | 1 | 0 | |a Attribution of advanced persistent threats : |b how to identify the actors behind cyber-espionage / |c Timo Steffens. |
264 | 1 | |a Berlin, Germany : |b Springer Vieweg, |c [2020] | |
300 | |a 1 online resource (xiv, 201 pages) | ||
336 | |a text |b txt |2 rdacontent | ||
337 | |a computer |b c |2 rdamedia | ||
338 | |a online resource |b cr |2 rdacarrier | ||
504 | |a Includes bibliographical references and index. | ||
520 | |a An increasing number of countries develop capabilities for cyber-espionage and sabotage. The sheer number of reported network compromises suggests that some of these countries view cyber-means as integral and well-established elements of their strategical toolbox. At the same time the relevance of such attacks for society and politics is also increasing. Digital means were used to influence the US presidential election in 2016, repeatedly led to power outages in Ukraine, and caused economic losses of hundreds of millions of dollars with a malfunctioning ransomware. In all these cases the question who was behind the attacks is not only relevant from a legal perspective, but also has a political and social dimension. Attribution is the process of tracking and identifying the actors behind these cyber-attacks. Often it is considered an art, not a science. This book systematically analyses how hackers operate, which mistakes they make, and which traces they leave behind. Using examples from real cases the author explains the analytic methods used to ascertain the origin of Advanced Persistent Threats. The Content Advanced Persistent Threats The attribution process Analysis of malware Attack infrastructure Analysis of control servers Geopolitical analysis Telemetry - data from security products Methods of intelligence agencies Doxing False flags Group set-ups Communication Ethics of attribution The Target Audience IT-security professionals International relations researchers Technical journalists Employees of organizations that are targeted by Advanced Persistent Threats The Author Dr. Timo Steffens was involved in the analysis of many of the most spectacular cyber-espionage cases in Germany. He has been tracking the activities and techniques of sophisticated hacker groups for almost a decade. | ||
588 | 0 | |a Online resource; title from digital title page (viewed on August 18, 2020). | |
505 | 0 | |a Introduction: Advanced persistent threats -- The attribution process. -- Attribution methods: Analysis of malware -- Attack infrastructure -- Analysis of control servers -- Geopolitical analysis -- Telemetry : data from security products -- Methods of intelligence agencies -- Doxing -- False flags -- Group set-ups. -- Strategical aspects: Communication -- Ethics of attribution -- Conclusion and outlook. | |
650 | 0 | |a Cyber intelligence (Computer security) | |
650 | 7 | |a Cyber intelligence (Computer security) |2 fast | |
776 | 0 | 8 | |i Print version: |a Steffens, Timo. |t Attribution of advanced persistent threats. |d Berlin, Germany : Springer Vieweg, [2020] |z 3662613123 |z 9783662613122 |w (OCoLC)1153306264 |
856 | 4 | 0 | |u https://ucblibraries.skillport.com/skillportfe/main.action?assetid=154859 |z Full Text (via Skillsoft) |
915 | |a - | ||
956 | |a Skillsoft ITPro | ||
956 | |b Skillsoft ITPro Skillport Collection | ||
994 | |a 92 |b COD | ||
998 | |b Subsequent record output | ||
999 | f | f | |i efd40fdb-9d47-59a4-b330-d74c7b88b9b2 |s 1be44709-2af7-528d-b6c9-e5de29576f4a |
952 | f | f | |p Can circulate |a University of Colorado Boulder |b Online |c Online |d Online |e QA76.9.A25 S74 2020 |h Library of Congress classification |i web |n 1 |