ABSTRACT

Many small and medium scale businesses cannot afford to procure expensive cybersecurity tools. In many cases, even after procurement, lack of a workforce with knowledge of the standard architecture of enterprise security, tools are often used ineffectively. The Editors have developed multiple projects which can help in developing cybersecurity solution architectures and the use of the right tools from the opensource software domain. This book has 8 chapters describing these projects in detail with recipes on how to use opensource tooling to obtain standard cyber defense and the ability to do self-penetration testing and vulnerability assessment. This book also demonstrates work related to malware analysis using machine learning and implementation of honeypots, network Intrusion Detection Systems in a security operation center environment. It is essential reading for cybersecurity professionals and advanced students.

Preface List of Figures List of Tables List of Contributors List of Abbreviations 1 Introduction I Deception Technologies & Threat Visibility – Honeypots and Security Operations 2 Honeynet – Deploying a Connected System of Diverse Honeypots Using Open-Source Tools 3 Implementation of Honeypot, NIDs, and HIDs Technologies in SOC Environment 4 Leveraging Research Honeypots for Generating Credible Threat Intelligence and Advanced Threat Analytics 5 Collating Threat Intelligence for Zero Trust Future Using Open-Source Tools II Malware Analysis 6 Malware Analysis Using Machine Learning 7 Feature Engineering and Analysis Toward Temporally Robust Detection of Android Malware III Tools for Vulnerability Assessment and PenetrationTesting 8 Use ModSecurity Web Application Firewall to Mitigate OWASP’s Top 10 Web Application Vulnerabilities 9 Offensive Security with Huntsman: A concurrent Versatile Malware Bibliography Index About the Editors