|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/learn-ethical-hacking-using-kali-linux-red-team-tactics/
课程评论：没有评论
课程名称：使用Kali Linux学习道德黑客技术 概述：道德黑客是什么？道德黑客是指在获得授权的情况下，尝试未经授权访问计算机系统、应用程序或数据的行为。进行道德黑客的目标是在恶意攻击者有机会利用安全漏洞之前，识别和解决这些漏洞。道德黑客通常被称为“白帽黑客”，他们是执行安全评估的专家，他们的前瞻性工作有助于改善组织的安全态势。在获得组织或IT资产所有者的先前批准后，道德黑客的任务与恶意黑客相对立。 红队是什么？红队由安全专业人员组成，他们充当对手，突破网络安全防护。红队通常由独立的道德黑客组成，以客观的方式评估系统安全。它们利用所有可用技术查找人、流程和技术上的弱点，以便未经授权访问资产。通过模拟攻击，红队会提出建议和计划，帮助加强组织的安全防护。 红队如何工作？你可能会惊讶地发现，红队在进行攻击之前花费了更多时间进行攻击策划。事实上，红队通过多种方法获取网络访问权限。例如，社会工程攻击依赖于侦察和研究，以实施有针对性的鱼叉式网络钓鱼活动。同样，在执行渗透测试之前，红队会使用数据包嗅探器和协议分析器扫描网络，尽可能多地收集系统信息。 蓝队是什么？蓝队由安全专业人员组成，他们对组织有内部了解。他们的任务是保护组织的关键资产免受各种威胁。蓝队了解业务目标和组织的安全策略，因此，他们的任务是加强防御，确保没有入侵者能够攻破防线。 蓝队如何工作？蓝队首先收集数据，准确记录需要保护的内容，并进行风险评估。然后，他们会通过多种方式加强系统的访问控制，包括引入更严格的密码策略和教育员工确保他们理解和遵守安全程序。通常，蓝队会部署监控工具，记录和检查访问系统的信息，以发现异常活动。蓝队还会定期检查系统，例如进行DNS审计、内部或外部网络漏洞扫描，以及捕获网络流量进行分析。
What is ethical hacking?Ethical hacking involves an authorized attempt to gain unauthorized access to a computer system, application, or data. Carrying out an ethical hack involves duplicating strategies and actions of malicious attackers. This practice helps to identify security vulnerabilities which can then be resolved before a malicious attacker has the opportunity to exploit them.Also known as "white hats," ethical hackers are security experts that perform these assessments. The proactive work they do helps to improve an organization's security posture. With prior approval from the organization or owner of the IT asset, the mission of ethical hacking is opposite from malicious hacking.What Is A Red Team?A red team consists of security professionals who act as adversaries to overcome cyber security controls. Red teams often consist of independent ethical hackers who evaluate system security in an objective manner.They utilize all the available techniques to find weaknesses in people, processes, and technology to gain unauthorized access to assets. As a result of these simulated attacks, red teams make recommendations and plans on how to strengthen an organization's security posture.How Does A Red Team Work?You might be surprised to learn that red teams spend more time planning an attack then they do performing attacks. In fact, red teams deploy a number of methods to gain access to a network.Social engineering attacks, for example, rely on reconnaissance and research to deliver targeted spear phishing campaigns. Likewise, prior to performing a penetration test, packet sniffers and protocol analyzers are used to scan the network and gather as much information about the system as possible.What Is A Blue Team?A blue team consists of security professionals who have an inside out view of the organization. Their task is to protect the organization's critical assets against any kind of threat.They are well aware of the business objectives and the organization's security strategy. Therefore, their task is to strengthen the castle walls so no intruder can compromise the defenses.How Does A Blue Team Work?The blue team first gathers data, documents exactly what needs to be protected and carries out a risk assessment. They then tighten up access to the system in many ways, including introducing stronger password policies and educating staff to ensure they understand and conform to security procedures.Monitoring tools are often put in place, allowing information regarding access to the systems to be logged and checked for unusual activity. Blue teams will perform regular checks on the system, for example, DNS audits, internal or external network vulnerability scans and capturing sample network traffic for analysis.
