Publisher's Products purchased from Third Party sellers are not guaranteed by the publisher for quality, authenticity, or access to any online entitlements included with the product.
Manage your own robust, inexpensive cybersecurity testing environment
This hands-on guide shows clearly how to administer an effective cybersecurity testing lab using affordable technologies and cloud resources. Build Your Own Cybersecurity Testing Low-cost Solutions for Testing in Virtual and Cloud-based Environments fully explains multiple techniques for developing lab systems, including the use of Infrastructure-as-Code, meaning you can write programs to create your labs quickly, without manual steps that could lead to costly and frustrating mistakes. Written by a seasoned IT security professional and academic, this book offers complete coverage of cloud and virtual environments as well as physical networks and automation. Included with the book is access to videos that demystify difficult concepts.
Inside, you will discover how • Gather network requirements and build your cybersecurity testing lab • Set up virtual machines and physical systems from inexpensive components • Select and configure the necessary operating systems • Gain remote access through SSH, RDP, and other remote access protocols • Efficiently isolate subnets with physical switches, routers, and VLANs • Analyze the vulnerabilities and challenges of cloud-based infrastructures • Handle implementation of systems on Amazon Web Services, Microsoft Azure, and Google Cloud Engine • Maximize consistency and repeatability using the latest automation tools
It was not that long ago that attempting to build your own IT lab to create a test environment would be an expensive endeavor. Besides the hardware, a set of software security tools could set a person back significantly.
Now, Kali Linux, for example, has hundreds of open-source penetration-testing programs and is completely free. In the past, this set of software could cost more than $250,000 if purchased separately as commercial tools.
In Build Your Own Cybersecurity Testing Lab: Low-cost Solutions for Testing in Virtual and Cloud-based Environments (McGraw-Hill), author Ric Messier has written a practical, hands-on guide on how you can create your own security testing lab without needing to take out a second mortgage on your house.
In the book, Messier does the IT equivalent of the proverb "Give a man a fish, and you feed him for a day. Teach a man to fish, and you feed him for a lifetime'> And here he shows the reader how to build their own security testing lab. The focus is on affordable technologies, using cloud computing, as not requiring you to buy often expensive hardware.
After a detailed introduction to network design and operating systems, the second half of the book details how to create a cloud-based environment. This is particularly valuable given the hypergrowth of cloud computing, combined with the dearth of those with significant cloud and cloud security experience.
Messier has separate chapters for Amazon Web Services, Microsoft Azure, and Google Cloud Engine, which go into the unique configurations for each of them, and how to use their core components.
It is ironic that with a $50 list price, the book may be the most expensive part of your security lab. But the information in the book is certainly worth it, as it shows the reader a way to build an actual lab which can give them valuable experience which they can, in turn, make themselves much more sought-after on the job market.
Build Your Own Cybersecurity Testing Lab should be considered an investment in one's security expertise and growth. And is an excellent investment at that.
This is a tough book to rate as it is very informative but extremely general. There is also inconsistencies with the target audience this book attempts to focus on. It fluctuates between explaining the very basics of concepts to bringing up advanced topics with little to no guidance. For example, it takes the reader through the basics of networking and hardware only to delve into configuration settings and YAML and JSON format without much explanation of what things mean.