| Description |
1 online resource (205 pages) |
| Contents |
Intro -- Table of Contents -- About the Authors -- About the Technical Reviewer -- Acknowledgments -- Foreword -- Introduction -- Chapter 1: The Three Pillars of Cybersecurity -- Chapter 2: A Nuance on Lateral Movement -- Chapter 3: The Five A's of Enterprise IAM -- Authentication -- Authorization -- Administration -- Audit -- Analytics -- Chapter 4: Understanding Enterprise Identity -- People and Persona -- Physical Persona -- Electronic Persona -- Accounts -- Credentials -- Realizations -- Users -- Applications -- Machines -- Ownership -- Automation -- Types of Accounts -- Local Accounts |
|
Centralized Accounts -- Functional Accounts -- Managed or Proxy Accounts -- Service Accounts -- Application Management Accounts -- Cloud Accounts -- Entitlements -- Simple Entitlement -- Complex Entitlement -- Controls and Governance -- Roles -- Business Roles -- IT Roles -- Role Relationships to Support Least Privilege -- Discovery, Engineering, and Lifecycle Controls -- Chapter 5: Bots -- Security Challenges -- Management Opportunities -- Governing Bots -- Chapter 6: Identity Governance Defined -- Who Has Access to What? -- Managing the Complexity of User Access -- The Scope of the Problem |
|
Managing the Full Lifecycle of Access -- Chapter 7: The Identity Governance Process -- Visibility, Connectivity, and Context -- Authoritative Sources of Identity -- Approach to Connectivity -- Direct-API Connectivity -- Shared-Repository Connectivity and Deferred Access -- Standards-Based Connectivity -- Custom-Application Connectivity -- Connector Reconciliation and Native Change Detection -- Correlation and Orphan Accounts -- Visibility for Unstructured Data -- Building an Entitlement Catalog -- The Power to Search and Report -- Full Lifecycle Management |
|
The LCM State Model and Lifecycle Events -- LCM States -- Joiner, Mover, and Leaver Events -- Lifecycle Triggers and Change Detection -- Delegation and Manual Events -- Taking a Model-Based Approach -- Enterprise Roles as a Governance Policy Model -- Embedded Controls -- Provisioning and Fulfillment -- Provisioning Gateways and Legacy Provisioning Processes -- Provisioning Broker, Retry, and Rollback -- Entitlement Granularity and Account-Level Provisioning -- Governance Policy Enforcement -- Business Rules for Access Compliance -- Separation of Duty (SoD) Policies -- Account Policies |
|
Entitlement Policies -- Preventive and Detective Policy Enforcement -- Violation Management -- Certification and Access Reviews -- Purpose and Process -- Certification Pitfalls -- Evolution and Future State -- Enterprise Role Management -- Why Roles? -- Role Model Basics -- Business Roles -- IT Roles -- Required or Mandatory Role Relationships -- Optional or Permitted Role Relationships -- Engineering, Discovery, and Analysis -- Role Lifecycle Management -- Enterprise Role Tips and Tricks -- The Future of Roles -- Governing Unstructured Data -- Changing Problem Scope |
| Note |
File Access Governance Capabilities |
|
Includes index. |
| Summary |
Discover how poor identity and privilege management can be leveraged to compromise accounts and credentials within an organization. Learn how role-based identity assignments, entitlements, and auditing strategies can be implemented to mitigate the threats leveraging accounts and identities and how to manage compliance for regulatory initiatives. As a solution, Identity Access Management (IAM) has emerged as the cornerstone of enterprise security. Managing accounts, credentials, roles, certification, and attestation reporting for all resources is now a security and compliance mandate. When identity theft and poor identity management is leveraged as an attack vector, risk and vulnerabilities increase exponentially. As cyber attacks continue to increase in volume and sophistication, it is not a matter of if, but when, your organization will have an incident. Threat actors target accounts, users, and their associated identities, to conduct their malicious activities through privileged attacks and asset vulnerabilities. Identity Attack Vectors details the risks associated with poor identity management practices, the techniques that threat actors and insiders leverage, and the operational best practices that organizations should adopt to protect against identity theft and account compromises, and to develop an effective identity governance program. You will: Understand the concepts behind an identity and how their associated credentials and accounts can be leveraged as an attack vector Implement an effective Identity Access Management (IAM) program to manage identities and roles, and provide certification for regulatory compliance See where identity management controls play a part of the cyber kill chain and how privileges should be managed as a potential weak link Build upon industry standards to integrate key identity management technologies into a corporate ecosystem Plan for a successful deployment, implementation scope, measurable risk reduction, auditing and discovery, regulatory reporting, and oversight based on real-world strategies to prevent identity attack vectors. |
| Subject |
Computer security.
|
|
Identity theft.
|
|
Computer Security |
|
Sécurité informatique. |
|
Vol d'identité. |
|
Computer security |
|
Identity theft |
| Added Author |
Rolls, Darran.
|
| Other Form: |
Print version: Haber, Morey J. Identity Attack Vectors : Implementing an Effective Identity and Access Management Solution. Berkeley, CA : Apress L.P., ©2019 9781484251645 |
| ISBN |
9781484251652 (electronic bk.) |
|
1484251652 (electronic bk.) |
| Standard No. |
10.1007/978-1-4842-5 |
|
More Resources