Amazon.com: Cyber Adversary Characterization: Auditing the Hacker Mind: Tom Parker, Marcus Sachs, Eric Shaw, Ed Stroz: Books


Digital Delivery
(How does this work?)
 

Cyber Adversary Characterization: Auditing the Hacker Mind
 
 

Cyber Adversary Characterization: Auditing the Hacker Mind [Download: PDF] [Digital]

Tom Parker (Author), Marcus Sachs (Author), Eric Shaw (Author), Ed Stroz (Author)
3.5 out of 5 stars  See all reviews (6 customer reviews)

Price: $49.95
o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o
Available for download now.
Ships from and sold by Amazon.com.
Edition: e-document (Learn more)

Customers Who Viewed This Item Also Viewed


Product Details

    Do you have the free reader for this item?
    Adobe Reader
  • Format: Adobe Reader (PDF)
  • Printable: Yes. This title is printable
  • Mac OS Compatible: OS 9.x or later
  • Windows Compatible: Yes
  • Handheld Compatible: Yes. Adobe Reader is available for PalmOS, Pocket PC, and Symbian OS.
  • Digital: 512 pages
  • Publisher: Syngress (August 14, 2004)
  • Average Customer Review: 3.5 out of 5 stars  See all reviews (6 customer reviews)
  • Amazon Best Sellers Rank: #7,229,078 Paid in Books (See Top 100 Paid in Books)
  • Required Free Software: Adobe Reader

Inside This Book (learn more)
Browse and search another edition of this book.
First Sentence:
When you picked this book from the shelf, chances are you did it for one of two reasons: from mere curiosity about the subject matter or because you felt that it will give you a better understanding of whom you are protecting your assets against and how y Read the first page
Key Phrases - Statistically Improbable Phrases (SIPs): (learn more)
disclosure pyramid, cyber adversaries, cyber adversary, attacker property, inhibitor object, mass rooters, adversarial properties, adversary characterization, attacker properties, available attack tools, attack inhibitors, adversary profile, composite placing, adversarial act, threat characterization, insider risk, characterization metrics, enumeration attempt, enumeration tools, direct compromise, vulnerability disclosure, malicious code attacks, acquisition ratio, update tapes, given detection
Key Phrases - Capitalized Phrases (CAPs): (learn more)
United States, The Don, Proprietary Application Penetration, New York, Polar Systems, Microsoft Windows, Sun Solaris, Kevin Mitnick, Michael Bloomberg, United Kingdom, Jesus Oquendo, Oleg Zezov, Department of Defense, Las Vegas, Department of Homeland Security, Information Propagation, Intel Sources, White House, Alexis Park, Animal Liberation Front, Attack Drivers Through Variables, Badger Computer Systems, Bob Knuth, Community Research Center, Owner Object Influence
New!
Books on Related Topics | Concordance | Text Stats
Browse Sample Pages:
Front Cover | Table of Contents | First Pages | Index | Surprise Me!
Search Inside This Book:



Suggested Tags from Similar Products

 (What's this?)
Be the first one to add a relevant tag (keyword that's strongly related to this product).
 

Your tags: Add your first tag
 

 

Customer Reviews

6 Reviews
5 star:
 (1)
4 star:
 (3)
3 star:
 (1)
2 star:    (0)
1 star:
 (1)
 
 
 
 
 
Average Customer Review
3.5 out of 5 stars (6 customer reviews)
 
 
 
 
Share your thoughts with other customers:
Most Helpful Customer Reviews

8 of 9 people found the following review helpful:
3.0 out of 5 stars Uneven quality, August 27, 2004
An uneven book. The preface and last chapter are by far the best parts. Noted technology commentator Richard Thieme ("Islands in the Clickstream") gives the preface. A mere 4 pages. But very eloquent and lucid. A joy to read. The last chapter is a semi-ficticious narrative of how a hacker breaks into various computers. Unix and network experts will like the depth and ingenuity described. It can be very educational, even for experienced sysadmins.

But other chapters are poorly done. For example, Chapter 2 is on Theoretical Characterisation Metrics. It repeatedly uses various conditional probabilities, but with a wrong notation. For a probability of B given A, it uses p(B)/A. The standard notation is P(B|A). Used for decades in statistics course. First year undergraduate level.

Other chapters, presumably written by different people, do use the correct notation. But Chapter 3, on the Cyber Food Chain, has an even more disturbing flaw. It has tables of what it calls mean inhibitor values. Derived from sets of values with only 1 significant figure. But the means are given to 4 significant figures! At best, the means only have 2. What this author is doing is imputing a false accuracy of 2 extra significant figures, or 100 times greater than actuality. More strictly, it is probably close to 1000 times greater, because the mean is really no better than one significant figure.

So what? Well, given that the authors goof on such elementary steps, it should give you serious reservations about their more "sophisticated" operations, where they discuss various metrics.

Another thing. One chapter's title is mis-spelled on the top of every page in the chapter. Irritating. Makes one wonder about the proof reading.
Help other customers find the most helpful reviews 
Was this review helpful to you? Yes No


7 of 8 people found the following review helpful:
4.0 out of 5 stars A methodical assessment of risk..., August 24, 2004
I finished reading Cyber Adversary Characterization - Auditing The Hacker Mind by Tom Parker, Eric Shaw, Ed Stroz, Matthew G. Devost, and Marcus H. Sachs. This is a very different book than anything I've seen, read, or reviewed...

Chapter breakout: Introduction; Theoretical Characterization Metrics; Disclosure and the Cyber Food Chain; Rating the Attack: Post-Incident Characterization Metrics; Asset Threat Characterization; Bringing It All Together: Completing the Cyber Adversary Model; WarmTouch: Assessing the Insider Threat and Relationship Management; Managing the Insider Threat; The Cyber Adversary in Groups: Targeting Nations' Critical Infrastructures; Characterizing the Extremes - Terrorists and Nation States; Return on Investment; Final Words; Glossary; Index

Most books that concern themselves with the "hacker mindset" do so with personality characterizations and attack methods. When you get done, you may understand how attacks occur, but you're no further along in doing a critical risk assessment of your particular environment. This book is the first I've seen that attempts to analyze the components mathematically in order to allow you to weight different scenarios against each other. The authors do a decent job in taking individual characteristics of the attacker, the environment, and the target, explaining how each component affects an attack scenario, and then giving a formula that can be used to assign a numeric value. While you may not agree with the interpretation, it's a rigorous approach to something that can be hard to quantify.

I haven't decided whether I approve of the WarmTouch chapter. It's a software package developed by the authors that attempts to chart threat assessment from a person based on email wording, actions, and other observed behavior. The idea is interesting, but I normally have issues with a book like this being used to push an author's product. I'll just say buyer beware in this case...

Bottom line... this would be a useful read for someone in security consulting and auditing, and would help an organization take a methodical view of their environment for risk assessment. There's not much on the book market like this volume.
Help other customers find the most helpful reviews 
Was this review helpful to you? Yes No


3 of 4 people found the following review helpful:
1.0 out of 5 stars Poorly Written Book that Needs Serious Editing, August 26, 2005
By 
CyberChick (Washington, DC) - See all my reviews
Amazon Verified Purchase(What's this?)
This book attempts to discuss a topic of great interest to me. Since there are no other books in print that address this topic, I eagerly bought the book with great expectations. Unfortunatly I have been highly disappointed.

I highly recommend you avoid this book if you have an aversion to the gross butchering of the English language. I have found this book to be so far over the line of good writing that it is distracting. I haven't even been able to make it out of the second chapter! Sentence structures are unnecessarily complex and wordy. The text is replete with grammatical errors and misspellings. The author created terms to describe his concepts, yet the terms have other connotations, making it further difficult to understand. Parsing and understanding what the author is trying to say in certain passages is difficult at best. I'm sure if I had been in meetings with this author, I would know his language and intuitively understand what he means, but the new reader, devoid of that knowledge, is at a significant disadvantage. If this book had been properly edited, it would be about half its size. One has to ask what the publisher was thinking, or not.

This is most unfortunate. The threat of cyber attacks against national interests and critical infrastructure is very high. Having a book that proposes a systematic methodology to help identify and address those threats would be most useful.
Help other customers find the most helpful reviews 
Was this review helpful to you? Yes No

Share your thoughts with other customers: Create your own review
 
 
 
Most Recent Customer Reviews




Only search this product's reviews



Customer Discussions

This product's forum
Discussion Replies Latest Post
No discussions yet

Ask questions, Share opinions, Gain insight
Start a new discussion
Topic:
First post:
Prompts for sign-in
 

Search Customer Discussions
Search all Amazon discussions
   


Listmania!


Create a Listmania! list

So You'd Like to...


Create a guide


Look for Similar Items by Category


Look for Similar Items by Subject

Search Books by subject:



i.e., each book must be in subject 1 AND subject 2 AND ...