Passive Python Network Mapping: P2NMAP (Paperback)

Python Passive Network Mapping: P2NMAP is the first book to reveal a revolutionary and open source method for exposing nefarious network activity.

The "Heartbleed" vulnerability has revealed significant weaknesses within enterprise environments related to the lack of a definitive mapping of network assets. In Python Passive Network Mapping, Chet Hosmer shows you how to effectively and definitively passively map networks. Active or probing methods to network mapping have traditionally been used, but they have many drawbacks - they can disrupt operations, crash systems, and - most importantly - miss critical nefarious activity. You require an accurate picture of the environments you protect and operate in order to rapidly investigate, mitigate, and then recover from these new attack vectors. This book gives you a deep understanding of new innovations to passive network mapping, while delivering open source Python-based tools that can be put into practice immediately.

Python Passive Network Mapping is for practitioners, forensic investigators, IT teams, and individuals who work together when performing incident response and investigating potential damage, or are examining the impacts of new malware threats. Those defending critical infrastructures will have a special interest in this book, as active or probing methods of network mapping are rarely used within these environments as any resulting impacts can be disastrous. Python Passive Network Mapping is ideally suited for use as a text in a variety of academic programs to expose and engage students in the art of passively mapping enterprise networks, with the added benefit of providing exposure to open source Python solutions.

• First book to show you how to use open source Python to conduct passive network mapping
• Provides a new method for conducting incident response and investigating the extent of potential damage to your systems
• Python code forensics toolkit for network mapping included on the companion website

「Python被動式網路映射：P2NMAP」是第一本揭示一種革命性且開源的方法來揭露惡意網路活動的書籍。

「Heartbleed」漏洞揭示了企業環境中與網路資產缺乏明確映射相關的重大弱點。在「Python被動式網路映射」中，Chet Hosmer向您展示如何有效且明確地進行被動式網路映射。傳統上使用主動或探測式的方法進行網路映射，但它們有許多缺點 - 它們可能會干擾操作、使系統崩潰，最重要的是可能會錯過關鍵的惡意活動。您需要準確了解您所保護和操作的環境，以便快速調查、緩解並從這些新的攻擊向量中恢復。本書讓您深入了解被動式網路映射的新創新，同時提供可立即實踐的基於Python的開源工具。

「Python被動式網路映射」適用於從業人員、法醫調查人員、IT團隊和在執行事件回應和調查潛在損害時共同工作的個人，或者正在檢查新的惡意軟體威脅的影響的人。那些保護關鍵基礎設施的人對本書特別感興趣，因為在這些環境中很少使用主動或探測式的網路映射方法，因為可能造成災難性的影響。「Python被動式網路映射」非常適合作為各種學術課程的教材，以揭示並讓學生參與被動式映射企業網路的藝術，同時還提供了開源Python解決方案的曝光。

- 第一本展示如何使用開源Python進行被動式網路映射的書籍
- 提供一種新的方法來進行事件回應並調查系統潛在損害的程式碼取證工具包，附帶在配套網站上