Cloud Attack Vectors: Building Effective Cyber-Defense Strategies to Protect Cloud Resources

Cyberattacks are increasing in volume and sophistication, targeting everything owned, managed, and serviced from the cloud. Threat actors typically target the path of least resistance, which is shifting in substantive ways due to the accelerating adoption of cloud technologies and remote work. Attackers have realigned their efforts, focusing on remaining undetected, monetization after exploitation, and publicly shaming organizations after a breach. New, innovative, and useful products continue to emerge, but they also have distinct limitations. The best security any organization can achieve is to establish controls and procedures in conjunction with services that are licensed in the cloud. Cloud Attack Vector details the risks associated with cloud deployments, the techniques threat actors leverage, the empirically-tested defensive measures organizations should adopt, and shows how to improve detection of malicious activity.

Format: Paperback / softback
Length: 473 pages
Publication date: 22 July 2022
Publisher: APress

Cyberattacks are becoming more frequent and complex, targeting everything owned, managed, and serviced from the cloud. There is a general agreement that it is not a matter of if but when an organization will be breached. Attackers often take the path of least resistance, and with the increasing adoption of cloud technologies and remote work, this path is changing significantly. In recent years, attackers have shifted their focus to remaining undetected, monetizing after exploitation, and publicly shaming organizations after a breach. While new products are emerging to provide cloud protection, they have limitations. No single solution or strategy can effectively protect against all cloud attack vectors or identify all malicious activity. The cloud is based on a company's assets being offered as services, and the best security an organization can achieve is to establish controls and procedures in conjunction with services that are licensed in the cloud. Cloud Attack Vector details the risks associated with cloud deployments, the techniques threat actors leverage, the empirically-tested defensive measures organizations should adopt, and shows how to improve detection of malicious activity. It covers key definitions pertaining to cloud technologies, threats, and cybersecurity solutions, how entitlements, permissions, rights, identities, accounts, credentials, and exploits can be leveraged to breach a cloud environment, and how to implement defensive and monitoring strategies to mitigate cloud threats, including those unique to cloud and hybrid cloud environments. It also provides a comprehensive model for developing a cloud security strategy.

Weight: 771g
Dimension: 235 x 155 (mm)
ISBN-13: 9781484282359
Edition number: 1st ed.