
Yuri Diogenes Erdal Ozkaya
This book aims at IT professional who want to venture the IT security domain. IT pentester, Security consultants, and ethical hackers will also find this course useful. Prior knowledge of penetration testing would be beneficial.
内容确如书名所示,重在“攻防策略”。既然是策略,就难免落入泛泛而谈的窠臼。攻,是从kill chain杀伤链的框架入手,防,是从纵深防御切入,但逻辑性不强,既没有devsecops这样的研发安全体系,也没有ipdrr这样的建设框架,而是按入侵检测、日志分析、网络分片等模块展开,讲的又不深入,篇幅很短。从章节的阅读体验上还可以,最后有详实的reference和summay,值得学习。建议浅浅读一下即可。