دانلود کتاب استراتژی امنیت سایبری برای عصر هوش مصنوعی، استراتژی‌های اثبات‌شده و تاکتیک‌های مبتنی بر داده برای مختل کردن حملات و تقویت

Imagine you are in a submarine hundreds of feet below the surface, surrounded by dark, freezing water. The hull is under immense pressure from all directions, and a single mistake in its design, construction, or operation could spell disaster for the vessel and everyone aboard. Inside are 150 crew members, several guests, and technologies sourced from 50 different vendors. Three crew members plan to leave the organization after this voyage and are quietly collecting copies of _les containing their most important work. One crew member, angry about a promotion he believes he deserved, is plotting how to sabotage the submarine’s systems after the voyage in retaliation. Two others have repeatedly exercised poor judgment in their operational roles, putting the entire crew at risk. Unbeknownst to anyone, one of the guests is an agent of a competing organization, searching for sensitive data and intellectual property to steal, and for opportunities to extort the organization for profit. Meanwhile, back at the crew’s headquarters onshore, third-party consultants and industry vendors are meeting with executives and members of the Board of Directors, insisting that the submarine lacks the right technologies and that the captain is not up to the task without their help. Their claims have led some executives to openly question the captain’s leadership and competency. Although the submarine is relatively new, the technologies installed onboard are connected by communications protocols developed in the 1970s. These protocols make integration easy and enable communication with the public Internet, but they also expose the submarine to tens of thousands of software and hardware vulnerabilities and hundreds of millions of pieces of malware. The number of threat actors interested in disrupting the organization’s operations has steadily grown for decades, including nation-state groups that now operate openly on the public Internet with impunity. This is the situation the captain and crew find themselves in—and it is analogous to the challenge that Chief Information Security Officers (CISOs) and their teams face today. Their organizations are surrounded on the Internet by adversaries constantly probing for ways to penetrate and compromise their IT infrastructures. Their people receive wave after wave of social engineering attacks designed to trick them into making poor trust decisions that undermine the controls their security teams have implemented. The specters of ransomware and data breaches haunt CISOs, Chief Information Officers (CIOs), Chief Technology Officers (CTOs), and Boards of Directors at even the most sophisticated organizations. Driven by the continuous adoption of new technologies, the attack surfaces of modern enterprises continue to expand faster than proportional investments in cybersecurity programs. After conducting hundreds of incident response investigations for Microsoft’s enterprise customers, publishing thousands of pages of threat intelligence, and assisting some of Amazon Web Services’ (AWS) largest customers, I have had the opportunity to learn from and advise thousands of businesses and public sector organizations in nearly every country around the world. I have also had the privilege of leading operational cybersecurity teams at some of America’s best companies. I wrote this book to share some of the insights and lessons I’ve learned during my career. The views and opinions expressed in this book are my own and not those of my current or former employers.