rdf-syntax-grammar
mods:
  schema location: http://www.loc.gov/mods/v3 http://www.loc.gov/standards/mods/v3/mods-3-2.xsd
  title info:
    non sort: The
    title: Vulnerability Researcher's Handbook
    sub title: A Comprehensive Guide to Discovering, Reporting, and Publishing Security Vulnerabilities
  name:
    name part: Strout, Benjamin
    role:
      role term: creator
    role:
      role term: author.
  type of resource: text
  origin info:
    place:
      place term: enk
    place:
      place term: Birmingham
    publisher: Packt Publishing, Limited
    date issued: 2023
    edition: 1st edition.
    issuance: monographic
  language:
    language term: eng
  physical description:
    form: remote
    extent: 1 online resource (260 p.)
  abstract: Learn the right way to discover, report, and publish security vulnerabilities to prevent exploitation of user systems and reap the rewards of receiving credit for your work Key Features Build successful strategies for planning and executing zero-day vulnerability research Find the best ways to disclose vulnerabilities while avoiding vendor conflict Learn to navigate the complicated CVE publishing process to receive credit for your research Book Description Vulnerability researchers are in increasingly high demand as the number of security incidents related to crime continues to rise with the adoption and use of technology. To begin your journey of becoming a security researcher, you need more than just the technical skills to find vulnerabilities; you'll need to learn how to adopt research strategies and navigate the complex and frustrating process of sharing your findings. This book provides an easy-to-follow approach that will help you understand the process of discovering, disclosing, and publishing your first zero-day vulnerability through a collection of examples and an in-depth review of the process. You'll begin by learning the fundamentals of vulnerabilities, exploits, and what makes something a zero-day vulnerability. Then, you'll take a deep dive into the details of planning winning research strategies, navigating the complexities of vulnerability disclosure, and publishing your research with sometimes-less-than-receptive vendors. By the end of the book, you'll be well versed in how researchers discover, disclose, and publish vulnerabilities, navigate complex vendor relationships, receive credit for their work, and ultimately protect users from exploitation. With this knowledge, you'll be prepared to conduct your own research and publish vulnerabilities. What you will learn Find out what zero-day vulnerabilities are and why it's so important to disclose and publish them Learn how vulnerabilities get discovered and published to vulnerability scanning tools …
  table of contents: Cover -- Title Page -- Copyright and Credits -- Dedication -- Contributors -- Disclaimer -- Table of Contents -- Preface -- Part 1- Vulnerability Research Fundamentals -- Chapter 1: An Introduction to Vulnerabilities -- Introducing software vulnerabilities -- The CIA Triad -- Organizing impacts -- Getting familiar with software vulnerability scanners -- Common vulnerability scanning tools -- Exploring common types of software vulnerabilities -- Web applications -- Client-server applications -- Inspecting the software vulnerability life cycle -- Inception -- Discovery
  table of contents: Exploitation and remediation -- Deprecation -- Summary -- Further reading -- Chapter 2: Exploring Real-World Impacts of Zero-Days -- Zero-days -- what are they? -- Zero-day vulnerability -- Zero-day attack -- An analogy of zero-day terminology -- Exploring zero-day case studies -- Pulse -- CVE-2019-11510 -- Confluence -- CVE-2021-26084 -- Microsoft .NET CVE-2017-8759 -- Citrix -- CVE-2019-19781 -- Considering zero-day ethics -- Researcher responsibility -- Vendor responsibility -- Summary -- Further reading -- Chapter 3: Vulnerability Research -- Getting Started with Successful Strategies
  table of contents: Technical requirements -- What is vulnerability research? -- Conducting research -- Selecting research targets -- Finding targets that interest you -- Likely vulnerable and downloadable software -- Exploring vulnerabilities with test cases -- Test cases -- a primer -- Building effective test suites -- Writing your own test cases -- Introducing common research tools -- Note-taking, screenshot, and screen recording tools -- Hypervisors and virtual machines -- Web application proxies -- Debuggers and decompilers -- Summary -- Further reading
  table of contents: Part 2 -- Vulnerability Disclosure, Publishing, and Reporting -- Chapter 4: Vulnerability Disclosure -- Communicating Security Findings -- Vulnerability disclosure -- what and why -- What is vulnerability disclosure? -- Why is vulnerability disclosure important? -- Different types of disclosures -- Bug bounties and coordinated disclosure -- Initiating disclosure -- What happens after disclosure? -- Sample disclosure template -- Approaching common challenges -- Duplication of efforts -- Unresponsive vendors -- Uncooperative vendors -- Failed vendors -- Hostile vendors -- Summary -- Further reading
  table of contents: Chapter 5: Vulnerability Publishing -Getting Your Work Published in Databases -- Demystifying vulnerability publishing -- Why publish vulnerabilities? -- What are some of the risks involved in vulnerability publishing? -- Selecting the right vulnerability publishing method -- CVE -- CVE CNA intermediates -- Ineligible application publication options -- Exploitation databases -- Practical vulnerability publishing examples -- A CNA-sponsored CVE -- A CNA-LR-sponsored CVE -- CNA intermediate sponsored CVE -- Summary -- Further reading
  table of contents: Chapter 6: Vulnerability Mediation -- When Things Go Wrong and Who Can Help
  note: Benjamin Strout.
  note: Description based upon print version of record.
  subject:
    topic: Business enterprises
    topic: Computer networks
    topic: Security measures
  subject:
    topic: Management information systems
    topic: Security measures
  classification: HD30.38
  classification: 658.4/78
  related item:
    title info:
      title: The Vulnerability Researcher's Handbook
    name:
      name part: Strout, Benjamin
    origin info:
      publisher: Birmingham : Packt Publishing, Limited,c2023
  identifier: 9781803243566
  identifier: 1803243562
  identifier: 9781803238876 O'Reilly Media
  identifier: https://proxy.library.tamu.edu/login
  record info:
    record content source: EBLCP
    record creation date: 230209
    record change date: 20260128225400.5
    record identifier: in00004673683
    language of cataloging:
      language term: eng