Active Cyber Defense

Countering advanced adversaries requires a nuanced and integrated approach to security. The Active Cyber Defense Cycle is a model for linking together those security analysts in an organization that look to identify adversaries, respond to them, and learn from the encounters. This model, developed and applied through the author's military and intelligence community career, is what organizations of all sizes will need going forward to predict and detect cyber security incidents, respond to them, and learn from them to feed back what they learn into the next cycle of prevention and detection. 

The book will combine the best in explaining the integration and approaches to pull together threat intelligence, Asset Identification and Network Security Monitoring, incident response, and Threat (malware) and Environment Manipulation with hands-on labs packet captures, malware samples, and incident response data from the author's personal lab. 

The book covers:

• The Threat Landscape and Security Challenges
• The Sliding Scale of Cyber Security
• Threat Intelligence Consumption
• Asset Identification and Network Security Monitoring
• Incident Response
• Threat and Environment Manipulation
• The Active Cyber Defense Cycle Applied

By combining these activities into the Active Cyber Defense Cycle organizations will get beyond the individual silos of network monitoring or reactive incident response into understanding how all of these parts fit together in a unified way to improve cyber security.