Marke: Daniel Koifman
Variante: Gebundenes Buch
Eigenschaften:
Most cybersecurity books teach you what to do. This one teaches you how to think.Detection engineering isn't just about writing rules and tuning alerts. It's about epistemology - what can we actually know from our logs? It's about game theory - how do adversaries adapt when we improve our defenses? It's about craft - when is a detection "good enough," and when are we chasing impossible perfection?A Dance of Red and Blue explores the philosophical foundations that provide the building blocks for modern detection engineering.Inside, you'll explore:The Epistemology of Detection — What can we truly know about threats from artifacts and telemetry? Where are the limits of observability?Signal, Noise, and Patterns — The philosophy of false positives, the tyranny of thresholds, and what makes a pattern meaningfulGame Theory and Adversarial Thinking — Why detection is an infinite game of move and countermove, and how to think multiple steps aheadThe Asymmetry Problem — Why defenders must be right every time while attackers need only succeed onceThe Craft of Detection — Aesthetics in rule design, the detective's mindset, and building detection that actually worksThe Human in the Loop — Why automation will never fully replace human judgment, and how to design for human-machine collaborationThe Art of Letting Go — Recognizing when detections have run their course, making peace with imperfection, and building sustainable practicesThis book is for:→ Detection engineers who want to think more deeply about their craft→ Threat hunters seeking a philosophical framework for their practice→ Security analysts tired of chasing alerts without understanding why→ DFIR professionals who recognize that technical skills alone aren't enough→ Anyone who believes security work is more art than algorithm"Daniel Koifman masterfully navigates the tension between automation and intuition, offering a framework for those who seek to master the 'dance' of adversarial security. A must-read for any engineer looking to elevate their practice from technical execution to strategic mastery." — Nikolas Bielski, Founding Architect of the Adversarial Detection Engineering (ADE) Framework, Technical Lead of Detection Engineering @ Fujitsu CyberThe threats are evolving. The tools are advancing. But the deepest challenges in detection are not purely technical. Learn to see what others miss - not through better technology, but through better thinking.
Der Artikel ist innerhalb weniger Tage lieferbar, die Lieferzeit beträgt hierbei 3-5 Werktage.
Die Ware wird kostenlos mit der Schweizerischen Post oder DPD versendet.
Rückgabe von Ware gemäss AGB
- Kostenlose Retouren innert 14 Tagen nach Erhalt
- Die Gutschrift erfolgt zu 100% der Kaufsumme
- zu Einzelheiten siehe Ziffer 8.0 und Ziffer 8.1. der AGB
Dir könnte gefallen
Mehr von Daniel Koifman
Zuletzt Angesehen