相關主題
商品描述
Guiding security leaders and executives who hold the privilege of defending modern organizations, "The CISO Playbook - The Adversarial Mindset" is a leadership-focused blueprint for outmaneuvering adversaries that iterate relentlessly. In an era where attackers view corporate defenders as "dumb, weak, and ineffective" due to organizational drag and over-reliance on static tools, this book empowers leaders to reclaim the initiative by adopting a true adversarial mindset.
Harnessing the concept of Decision Advantage, the book moves beyond treating incidents as isolated technical events by thinking in adversary terms: objectives, constraints, and tradecraft. It bridges the gap between attacker methods and board-level risk, showing how to translate security outcomes into the language of economics, EBITDA, and revenue protection.
Operationalizing lessons from real-world campaigns like SolarWinds, Volt Typhoon, and Operation Aurora, the text connects tradecraft to operational reality. It introduces the unique metric of Time-to-Hazard Neutralization, moving past ticket metadata to focus on the verified removal of risk from the environment.
Spotlighting the rise of the "Artificial Adversary," a central thread details how AI-enhanced human actors and autonomous systems act with malicious intent. From industrialized "vibe hacking" to active scanning and autonomous reconnaissance, the book reveals how AI accelerates the attacker's OODA loop and how CISOs must respond by compressing their own defensive cycles.
Translating theoretical models into repeatable methods, the text provides strategies for terrain engineering, deception, and resilience-centric incident response. Written for CISOs, deputies, and security leaders, it serves those who both brief members of C-Suites and boards and also run outcome-based programs. Instead of remaining a reactive enforcer, readers will find a blueprint for becoming a proactive Enterprise Risk Leader. Navigating this shift ultimately rewards the disciplined observation required to outthink the opponent.
商品描述(中文翻譯)
引導肩負保衛現代組織之重任、並享有這份特權的資安領導者與高階主管，《The CISO Playbook - The Adversarial Mindset》是一份以領導力為核心的藍圖，協助讀者智取那些持續反覆演進的對手。在攻擊者因組織運作遲滯，以及過度依賴靜態工具，而將企業防禦者視為「愚蠢、脆弱且無效」的時代，本書透過採納真正的對抗者思維，協助領導者重新掌握主動權。
本書運用「決策優勢（Decision Advantage）」概念，不再將資安事件視為彼此孤立的技術事件，而是從對手的角度思考：目標、限制條件與作戰技術。書中搭起攻擊者手法與董事會層級風險之間的橋梁，說明如何將資安成果轉化為經濟效益、EBITDA 與營收保護等高階主管熟悉的語言。
本書將 SolarWinds、Volt Typhoon 與 Operation Aurora 等真實世界攻擊行動的經驗轉化為可實際運用的洞見，將作戰技術與營運現實連結起來。書中介紹獨特的「危害中和時間（Time-to-Hazard Neutralization）」指標，不再停留於工單中繼資料，而是聚焦於經驗證後，確認風險已從環境中移除所需的時間。
書中以「人工智慧對手（Artificial Adversary）」的崛起為核心主題之一，詳細說明經 AI 強化的人類攻擊者與自主系統如何以惡意意圖採取行動。從工業化的「vibe hacking」到主動掃描與自主偵察，本書揭示 AI 如何加速攻擊者的 OODA loop，以及 CISO 必須如何壓縮自身的防禦週期，以做出回應。
本書將理論模型轉化為可重複執行的方法，提供地形工程、欺敵，以及以韌性為核心的事件回應策略。本書專為 CISO、副手與資安領導者而寫，適合那些既要向 C-Suite 成員與董事會進行簡報，又要負責執行以成果為導向之資安計畫的專業人士。讀者不必再只是被動應對的執法者，而能依循這份藍圖，成為主動積極的企業風險領導者（Enterprise Risk Leader）。而要完成這項轉變，最終仰賴的是有紀律的觀察力，藉此在思維上勝過對手。
作者簡介
Andres Andreu is currently the Chief Executive Officer (CEO) at Constella Intelligence, a 4X Chief Information Security Officer (CISO), and a renowned cybersecurity leader. He holds prestigious credentials including CISSP and ISSAP and is a Boardroom Certified Qualified Technology Expert (QTE). With a diverse career traversing federal government, corporate sectors, and entrepreneurial ventures in cybersecurity, he is a mentor, start-up advisor, and an acclaimed author.
His government tenure includes a significant impact in lawful intercept technology within federal law enforcement, earning three U.S. Department of Justice awards for his contributions to drug law enforcement. Transitioning to the corporate realm, Andres made a mark at Ogilvy & Mather as a partner and Chief Application Architect, later consulting for high-profile entities like the United Nations. As a founding member and key executive at Bayshore Networks (acquired by Opswat in 2021) and cybersecurity leader at Constella Intelligence, 2U, Inc./edX, and Hearst, his expertise has been pivotal in shaping varying cybersecurity landscapes.
Andreu's leadership and innovative approaches have garnered him accolades such as a Top 100 CISO (C100) by Security Current, Top 50 Information Security Professional, and recognition in leading industry publications. His experience encompasses both offensive and defensive cybersecurity strategies, underpinned by a philosophy that balances executive and employee objectives.
Author of The CISO Playbook, Professional Pen Testing Web Applications, and contributor to 97 Things Every Application Security Professional Should Know, his work extends beyond writing to inventing, with patents in cybersecurity innovations. He is also an active member of the Forgepoint Capital Cybersecurity Advisory Council.
A Cuban immigrant and proud American citizen, Andres balances his professional achievements with a happy marriage and four wonderful kids. He is an international level certified Judo coach with USA Judo and an artist. Andreu's multifaceted career and personal achievements highlight his profound impact on the cybersecurity field and beyond.
Hector Monsegur, known globally online as "Sabu," is one of the most infamous names in the history of hacking. As the driving force behind the legendary hacking collective LulzSec, an offshoot of Anonymous, he spearheaded high-profile breaches against Sony Pictures, PBS, Fox.com, and multiple government systems. His campaigns during the early 2010s redefined the scale and spectacle of cyber intrusions, making him a symbol of the hacker underground and a pivotal figure in the evolution of digital security.
After his arrest in 2011, Monsegur shocked the world by cooperating with U.S. federal authorities, helping to disrupt major planned cyberattacks and prevent untold damage. This unexpected turn gave him rare insight into both sides of the cybersecurity battlefield - the tactics of hackers and the mechanisms of law enforcement. His transformation from blackhat to security insider is a story of redemption and reinvention, steeped in controversy, credibility, and unmatched real-world experience.
Today, Hector is Chief Research Officer at SafeHill, a cutting-edge cybersecurity research firm dedicated to protecting organizations from the kinds of threats he once unleashed. SafeHill's services include elite penetration testing and its flagship threat exposure management platform, SafeHill SecureIQ, which enables businesses to identify, prioritize, and eliminate vulnerabilities before attackers can exploit them. Under his leadership, SafeHill is quickly earning a reputation as a disruptive force in the cybersecurity industry.
Beyond his work at SafeHill, Monsegur is an accomplished co-author, adjunct professor, and sought-after keynote speaker. He brings his signature edge and authenticity to classrooms, conferences, and boardrooms alike, training professionals and students to think like hackers while defending like strategists. His experience bridges underground hacking culture and enterprise-level security operations, making him one of the few experts who truly understands the full spectrum of cyber risk.
作者簡介(中文翻譯)
Andres Andreu 目前擔任 Constella Intelligence 執行長（CEO），曾四度擔任資訊安全長（CISO），也是享譽盛名的資安領導者。他擁有 CISSP 與 ISSAP 等重要專業認證，並取得 Boardroom Certified Qualified Technology Expert（QTE）資格。他的資安職涯跨足聯邦政府、企業界與創業領域；除了擔任導師與新創公司顧問，也是備受肯定的作者。
他任職政府期間，曾在聯邦執法機構的合法攔截技術領域帶來重大影響，並因對毒品執法工作的貢獻，三度獲頒美國司法部獎項。轉入企業界後，Andres 以 Ogilvy & Mather 合夥人兼首席應用程式架構師的身分嶄露頭角，之後也曾為 United Nations 等知名機構提供顧問服務。身為 Bayshore Networks 的創辦成員與重要主管（該公司於 2021 年被 Opswat 收購），以及 Constella Intelligence、2U, Inc./edX 和 Hearst 的資安領導者，他的專業能力對不同資安領域的發展具有關鍵影響。
Andreu 的領導能力與創新方法為他贏得多項殊榮，包括 Security Current 評選的百大資訊安全長（Top 100 CISO，C100）、Top 50 Information Security Professional，以及多家業界領導出版物的肯定。他的經驗涵蓋攻擊型與防禦型資安策略，並以兼顧高階主管與員工目標的理念為基礎。
他著有《The CISO Playbook》、《Professional Pen Testing Web Applications》，並參與撰寫《97 Things Every Application Security Professional Should Know》。他的工作不僅止於寫作，也延伸至發明與創新，並擁有多項資安創新專利。此外，他也是 Forgepoint Capital Cybersecurity Advisory Council 的活躍成員。
Andres 是古巴移民，也是以身為美國公民為傲的美國人；在專業成就之外，他也擁有幸福的婚姻與四名優秀的孩子。他是 USA Judo 認證的國際級柔道教練，也是一名藝術家。Andreu 多面向的職涯與個人成就，彰顯了他對資安領域及更廣泛社會所帶來的深遠影響。
Hector Monsegur 在網路上以「Sabu」聞名，是駭客史上最聲名狼藉的人物之一。身為傳奇駭客組織 LulzSec（Anonymous 的分支）的核心推動者，他主導了多起備受矚目的攻擊事件，目標包括 Sony Pictures、PBS、Fox.com，以及多個政府系統。他在 2010 年代初期發起的行動重新定義了網路入侵的規模與話題性，使他成為地下駭客圈的象徵，也是數位安全演進過程中的關鍵人物。
Monsegur 於 2011 年遭到逮捕後，與美國聯邦當局合作，震撼了全世界。他協助瓦解多起重大、原定發動的網路攻擊，並避免難以估計的損害。這項出人意料的轉折，讓他得以深入了解資安戰場的兩端：駭客的攻擊手法，以及執法機關的運作機制。他從黑帽駭客轉變為資安內行專家的過程，是一段充滿爭議、可信度考驗與無可比擬實戰經驗的救贖與重新出發故事。
如今，Hector 擔任 SafeHill 的首席研究官（Chief Research Officer）。SafeHill 是一家尖端資安研究公司，致力於保護組織免受他過去曾發動的類型威脅。SafeHill 提供的服務包括頂尖的滲透測試，以及旗艦級威脅曝險管理平台 SafeHill SecureIQ。該平台能協助企業在攻擊者加以利用之前，找出、排定優先順序並消除漏洞。在他的領導下，SafeHill 正迅速在資安產業建立起顛覆性的影響力。
除了在 SafeHill 的工作之外，Monsegur 也是成就卓著的共同作者、兼任教授及廣受邀請的主題演講者。他將獨特的敏銳觀點與真實可信的風格帶入教室、研討會與董事會，訓練專業人士與學生以駭客的思維進行思考，同時以策略家的方式進行防禦。他的經驗串聯了地下駭客文化與企業級安全營運，使他成為少數真正理解網路風險完整光譜的專家之一。
