
Yuri Diogenes Erdal Ozkaya
This book aims at IT professional who want to venture the IT security domain. IT pentester, Security consultants, and ethical hackers will also find this course useful. Prior knowledge of penetration testing would be beneficial.
內容確如書名所示,重在“攻防策略”。既然是策略,就難免落入泛泛而談的窠臼。攻,是從kill chain殺傷鏈的框架入手,防,是從縱深防禦切入,但邏輯性不強,既沒有devsecops這樣的研發安全體系,也沒有ipdrr這樣的建設框架,而是按入侵檢測、日誌分析、網絡分片等模塊展開,講的又不深入,篇幅很短。從章節的閱讀體驗上還可以,最後有詳實的reference和summay,值得學習。建議淺淺讀一下即可。