MARC details
| 000 -LEADER |
|---|
| fixed length control field |
04749nam a2200301 i 4500 |
| 003 - CONTROL NUMBER IDENTIFIER |
|---|
| control field |
CSPC |
| 005 - DATE AND TIME OF LATEST TRANSACTION |
|---|
| control field |
20250911105013.0 |
| 008 - FIXED-LENGTH DATA ELEMENTS--GENERAL INFORMATION |
|---|
| fixed length control field |
250910s2023 -uk 001 0 eng d |
| 020 ## - INTERNATIONAL STANDARD BOOK NUMBER |
|---|
| International Standard Book Number |
9781803238876 |
| 040 ## - CATALOGING SOURCE |
|---|
| Transcribing agency |
CSPC |
| 050 04 - LIBRARY OF CONGRESS CALL NUMBER |
|---|
| Classification number |
QA76.9.A25 |
| Item number |
S776 2023 |
| 082 04 - DEWEY DECIMAL CLASSIFICATION NUMBER |
|---|
| Classification number |
005.8 |
| Item number |
St893v |
| 100 1# - MAIN ENTRY--PERSONAL NAME |
|---|
| Personal name |
Strout, Benjamin, |
| Relator term |
author. |
| 245 14 - TITLE STATEMENT |
|---|
| Title |
The vulnerability researcher's handbook : |
| Remainder of title |
the comprehensive guide for discovering, reporting, and publishing security vulnerabilities / |
| Statement of responsibility, etc. |
Benjamin Strout. |
| 250 ## - EDITION STATEMENT |
|---|
| Edition statement |
1st edition. |
| 264 #1 - PRODUCTION, PUBLICATION, DISTRIBUTION, MANUFACTURE, AND COPYRIGHT NOTICE |
|---|
| Place of production, publication, distribution, manufacture |
Birmingham, UK : |
| Name of producer, publisher, distributor, manufacturer |
Packt Publishing, |
| Date of production, publication, distribution, manufacture, or copyright notice |
2023. |
| 300 ## - PHYSICAL DESCRIPTION |
|---|
| Extent |
xvii, 241 pages : |
| Other physical details |
illustrations ; |
| Dimensions |
24 cm. |
| 336 ## - CONTENT TYPE |
|---|
| Source |
rdacontent |
| Content type term |
text |
| 337 ## - MEDIA TYPE |
|---|
| Source |
rdamedia |
| Media type term |
unmediated |
| 338 ## - CARRIER TYPE |
|---|
| Source |
rdacarrier |
| Carrier type term |
volume |
| 500 ## - GENERAL NOTE |
|---|
| General note |
Includes index. |
| 505 0# - FORMATTED CONTENTS NOTE |
|---|
| Formatted contents note |
Part 1: Vulnerability research fundamentals -- An introduction to vulnerabilities -- Exploring real-world impacts of zero-days -- Vulnerability research - getting started with successful strategies -- Part 2: Vulnerability disclosure, publishing, and reporting -- Vulnerability disclosure - communicating security findings -- Vulnerability publishing - getting your work published in databases -- Vulnerability mediation - when things go wrong and who can help -- Independent vulnerability publishing -- Part 3: Case studies, researcher resources, and vendor resources -- Real-world case studies - digging into successful (and unsuccessful) research reporting -- Working with security researcher - a vendor's guide -- Templates, resources, and final guidance. |
| 520 ## - SUMMARY, ETC. |
|---|
| Summary, etc. |
"Learn the right way to discover, report, and publish security vulnerabilities to prevent exploitation of user systems and reap the rewards of receiving credit for your work Key Features Build successful strategies for planning and executing zero-day vulnerability research Find the best ways to disclose vulnerabilities while avoiding vendor conflict Learn to navigate the complicated CVE publishing process to receive credit for your research Book Description Vulnerability researchers are in increasingly high demand as the number of security incidents related to crime continues to rise with the adoption and use of technology. To begin your journey of becoming a security researcher, you need more than just the technical skills to find vulnerabilities; you'll need to learn how to adopt research strategies and navigate the complex and frustrating process of sharing your findings. This book provides an easy-to-follow approach that will help you understand the process of discovering, disclosing, and publishing your first zero-day vulnerability through a collection of examples and an in-depth review of the process. You'll begin by learning the fundamentals of vulnerabilities, exploits, and what makes something a zero-day vulnerability. Then, you'll take a deep dive into the details of planning winning research strategies, navigating the complexities of vulnerability disclosure, and publishing your research with sometimes-less-than-receptive vendors. By the end of the book, you'll be well versed in how researchers discover, disclose, and publish vulnerabilities, navigate complex vendor relationships, receive credit for their work, and ultimately protect users from exploitation. With this knowledge, you'll be prepared to conduct your own research and publish vulnerabilities. What you will learn Find out what zero-day vulnerabilities are and why it's so important to disclose and publish them Learn how vulnerabilities get discovered and published to vulnerability scanning tools Explore successful strategies for starting and executing vulnerability research Discover ways to disclose zero-day vulnerabilities responsibly Populate zero-day security findings into the CVE databases Navigate and resolve conflicts with hostile vendors Publish findings and receive professional credit for your work Who this book is for This book is for security analysts, researchers, penetration testers, software developers, IT engineers, and anyone who wants to learn how vulnerabilities are found and then disclosed to the public. You'll need intermediate knowledge of operating systems, software, and interconnected systems before you get started. No prior experience with zero-day vulnerabilities is needed, but some exposure to vulnerability scanners and penetration testing tools will help accelerate your journey to publishing your first vulnerability." |
| 650 #0 - SUBJECT ADDED ENTRY--TOPICAL TERM |
|---|
| Topical term or geographic name entry element |
Business enterprises |
| Form subdivision |
Computer networks |
| General subdivision |
Security measures. |
| 650 #0 - SUBJECT ADDED ENTRY--TOPICAL TERM |
|---|
| Topical term or geographic name entry element |
Management information systems |
| General subdivision |
Security measures. |
| 942 ## - ADDED ENTRY ELEMENTS (KOHA) |
|---|
| Source of classification or shelving scheme |
Dewey Decimal Classification |
| Suppress in OPAC |
No |
| Koha item type |
Books |
| Classification part |
005.8 |
| Item part |
St893v |
| Call number prefix |
GRD |
| Call number suffix |
2023 |