000 04254nam a22006015i 4500
001 978-3-662-61313-9
003 DE-He213
005 20240423125210.0
007 cr nn 008mamaa
008 200720s2020 gw | s |||| 0|eng d
020 _a9783662613139
_9978-3-662-61313-9
024 7 _a10.1007/978-3-662-61313-9
_2doi
050 4 _aQA76.9.A25
072 7 _aUR
_2bicssc
072 7 _aUTN
_2bicssc
072 7 _aCOM053000
_2bisacsh
072 7 _aUR
_2thema
072 7 _aUTN
_2thema
082 0 4 _a005.8
_223
100 1 _aSteffens, Timo.
_eauthor.
_4aut
_4http://id.loc.gov/vocabulary/relators/aut
245 1 0 _aAttribution of Advanced Persistent Threats
_h[electronic resource] :
_bHow to Identify the Actors Behind Cyber-Espionage /
_cby Timo Steffens.
250 _a1st ed. 2020.
264 1 _aBerlin, Heidelberg :
_bSpringer Berlin Heidelberg :
_bImprint: Springer Vieweg,
_c2020.
300 _aXIV, 205 p. 49 illus.
_bonline resource.
336 _atext
_btxt
_2rdacontent
337 _acomputer
_bc
_2rdamedia
338 _aonline resource
_bcr
_2rdacarrier
347 _atext file
_bPDF
_2rda
505 0 _aAdvanced Persistent Threats -- The attribution process.-Analysis of malware -- Attack infrastructure -- Analysis of control servers -- Geopolitical analysis -- Telemetry - data from security products -- Methods of intelligence agencies -- Doxing -- False flags -- Group set-ups -- Communication -- Ethics of attribution.
520 _aAn increasing number of countries develop capabilities for cyber-espionage and sabotage. The sheer number of reported network compromises suggests that some of these countries view cyber-means as integral and well-established elements of their strategical toolbox. At the same time the relevance of such attacks for society and politics is also increasing. Digital means were used to influence the US presidential election in 2016, repeatedly led to power outages in Ukraine, and caused economic losses of hundreds of millions of dollars with a malfunctioning ransomware. In all these cases the question who was behind the attacks is not only relevant from a legal perspective, but also has a political and social dimension. Attribution is the process of tracking and identifying the actors behind these cyber-attacks. Often it is considered an art, not a science. This book systematically analyses how hackers operate, which mistakes they make, and which traces they leave behind. Using examples from real cases the author explains the analytic methods used to ascertain the origin of Advanced Persistent Threats. The Content Advanced Persistent Threats The attribution process Analysis of malware Attack infrastructure Analysis of control servers Geopolitical analysis Telemetry - data from security products Methods of intelligence agencies Doxing False flags Group set-ups Communication Ethics of attribution The Target Audience IT-security professionals International relations researchers Technical journalists Employees of organizations that are targeted by Advanced Persistent Threats The Author Dr. Timo Steffens was involved in the analysis of many of the most spectacular cyber-espionage cases in Germany. He has been tracking the activities and techniques of sophisticated hacker groups for almost a decade.
650 0 _aData protection.
650 0 _aComputers
_xLaw and legislation.
650 0 _aInformation technology
_xLaw and legislation.
650 0 _aData protection
_xLaw and legislation.
650 0 _aComputer networks .
650 0 _aApplication software.
650 1 4 _aData and Information Security.
650 2 4 _aLegal Aspects of Computing.
650 2 4 _aPrivacy.
650 2 4 _aComputer Communication Networks.
650 2 4 _aComputer and Information Systems Applications.
710 2 _aSpringerLink (Online service)
773 0 _tSpringer Nature eBook
776 0 8 _iPrinted edition:
_z9783662613122
776 0 8 _iPrinted edition:
_z9783662613146
776 0 8 _iPrinted edition:
_z9783662613153
856 4 0 _uhttps://doi.org/10.1007/978-3-662-61313-9
912 _aZDB-2-SCS
912 _aZDB-2-SXCS
942 _cSPRINGER
999 _c175327
_d175327