Next Generation Red Teaming

47 Pages·2015·0.682 MB·English

by  Henry Dalziel

Next Generation Red Teaming
This pageintentionallyleftblank
Next Generation Red Teaming
Henry Dalziel
Contributing editor
Robert Wood
AMSTERDAM(cid:129)BOSTON(cid:129)HEIDELBERG(cid:129)LONDON
NEWYORK(cid:129)OXFORD(cid:129)PARIS(cid:129)SANDIEGO
SANFRANCISCO(cid:129)SINGAPORE(cid:129)SYDNEY(cid:129)TOKYO
SyngressisanimprintofElsevier
SyngressisanimprintofElsevier
225WymanStreet,Waltham,MA02451,USA
Copyrightr2015ElsevierInc.Allrightsreserved.
Nopartofthispublicationmaybereproducedortransmittedinanyformorbyanymeans,
electronicormechanical,includingphotocopying,recording,oranyinformationstorageand
retrievalsystem,withoutpermissioninwritingfromthepublisher.Detailsonhowtoseek
permission,furtherinformationaboutthePublisher’spermissionspoliciesandourarrangements
withorganizationssuchastheCopyrightClearanceCenterandtheCopyrightLicensingAgency,
canbefoundatourwebsite:www.elsevier.com/permissions
Thisbookandtheindividualcontributionscontainedinitareprotectedundercopyrightbythe
Publisher(otherthanasmaybenotedherein).
Notices
Knowledgeandbestpracticeinthisfieldareconstantlychanging.Asnewresearchand
experiencebroadenourunderstanding,changesinresearchmethodsorprofessionalpractices,
maybecomenecessary.
Practitionersandresearchersmustalwaysrelyontheirownexperienceandknowledgein
evaluatingandusinganyinformationormethodsdescribedherein.Inusingsuchinformation
ormethodstheyshouldbemindfuloftheirownsafetyandthesafetyofothers,includingparties
forwhomtheyhaveaprofessionalresponsibility.
Tothefullestextentofthelaw,neitherthePublishernortheauthors,contributors,oreditors,
assumeanyliabilityforanyinjuryand/ordamagetopersonsorpropertyasamatterofproducts
liability,negligenceorotherwise,orfromanyuseoroperationofanymethods,products,
instructions,orideascontainedinthematerialherein.
ISBN:978-0-12-804171-0
BritishLibraryCataloguing-in-PublicationData
AcataloguerecordforthisbookisavailablefromtheBritishLibrary
LibraryofCongressCataloging-in-PublicationData
AcatalogrecordforthisbookisavailablefromtheLibraryofCongress
ForInformationonallSyngresspublications
visitourwebsiteathttp://store.elsevier.com/
CONTENTS
Author Biography................................................................................vii
Contributing Editor Biography............................................................ix
Chapter 1 Introduction.........................................................................1
Chapter 2 The Typical Approach..........................................................5
Chapter 3 Red Team Assessment..........................................................9
Chapter 4 Elements for Success..........................................................15
Composite Attack Case Study............................................................17
Chapter 5 Who Are We Up Against...................................................21
Chapter 6 Things to Keep in Mind......................................................27
Chapter 7 Composite Attacks.............................................................31
Chapter 8 Conclusion.........................................................................35
This page intentionallyleftblank
AUTHOR BIOGRAPHY
Henry Dalziel is a serial education entrepreneur, founder of Concise
Ac Ltd, online cybersecurity blogger and e-book author. He writes for
the Concise-Courses.com blog and has developed numerous cyberse-
curity continuing education courses and books. Concise Ac Ltd devel-
ops and distributes continuing education content [books and courses]
for cybersecurity professionals seeking skill enhancement and career
advancement. The company was recently accepted onto the UK Trade
& Investment’s (UKTI) Global Entrepreneur Programme (GEP).
This page intentionallyleftblank
CONTRIBUTING EDITOR BIOGRAPHY
Robert Wood is a Technical Manager at Cigital and leads the develop-
ment and execution of the red team assessment practice for the firm.
Robert has worked with a number of clients spanning from Fortune
100 financial institutions to gaming companies providing services at
every stage in the SDLC. Prior to Cigital, Robert worked for Secure
Network Technologies where he developed the mobile forensic
investigation practice and focused his penetration testing efforts on red
teaming and network security assessments.