Skip to content

References: Advanced Security Operations and Incident Response

  1. Transport Layer Security - Wikipedia - Explains the cryptographic protocol that encrypts data moving between client and server, including the handshake and certificate validation central to this chapter's encryption-in-transit discussion.

  2. Penetration test - Wikipedia - Covers the history, methodologies, and phases of authorized simulated cyberattacks, directly supporting the chapter's treatment of penetration testing as empirical verification of a system's defenses.

  3. Zero trust architecture - Wikipedia - Describes the "never trust, always verify" security model that eliminates trusted network zones, the same philosophy the chapter uses to explain why perimeter-based defenses fall short.

  4. Zero Trust Networks: Building Secure Systems in Untrusted Networks (2nd Edition) - Evan Gilman and Doug Barth - O'Reilly Media - Credited as the first comprehensive technical treatment of zero trust, translating analyst John Kindervag's 2010 concept into the control-plane and data-plane design patterns this chapter's architecture section reflects.

  5. Penetration Testing: A Hands-On Introduction to Hacking - Georgia Weidman - No Starch Press - Weidman pioneered an accessible, lab-based teaching method -- building a personal virtual-machine pentesting lab step by step -- that made structured, hands-on penetration testing approachable for beginners.

  6. NIST SP 800-61 Revision 3: Incident Response Recommendations and Considerations - National Institute of Standards and Technology - The federal reference for structuring incident response, underlying the identify-contain-eradicate-recover-lessons-learned lifecycle this chapter's incident response diagram is built on.

  7. NIST SP 800-207: Zero Trust Architecture - National Institute of Standards and Technology - The authoritative federal specification defining zero trust principles and reference architectures, grounding the chapter's "never trust, always verify" explanation in an official technical standard.

  8. HIPAA Breach Notification Rule - American Medical Association - Summarizes covered entities' legal obligations to notify patients, regulators, and media after a breach of unsecured PHI, matching the chapter's coverage of the breach notification rule.

  9. OWASP Web Security Testing Guide - OWASP Foundation - A widely used, practitioner-authored methodology for testing web application security, directly applicable to the API-endpoint and injection-vulnerability scenarios the chapter uses to illustrate penetration testing.

  10. Identity and Access Management (IAM) in Cyber Security Roles - GeeksforGeeks - A practical overview of IAM roles, authentication, and authorization concepts that supports the chapter's discussion of IAM as the platform unifying SSO, RBAC, and provisioning.