The Art of Cyberwarfare - by Jon Dimaggio (Paperback)

About the Book

"This book is a guide to understanding the players in today's cyber wars, the techniques they use, and the process of analyzing their attacks. It provides an overview of actual cyber attacks conducted by nation-state actors and other advanced organizations and informs how defenders can track and attribute future attacks"--

Book Synopsis

A practical guide to understanding and analyzing cyber attacks by advanced attackers, such as nation states.

Cyber attacks are no longer the domain of petty criminals. Today, companies find themselves targeted by sophisticated nation state attackers armed with the resources to craft scarily effective campaigns. This book is a detailed guide to understanding the major players in these cyber wars, the techniques they use, and the process of analyzing their advanced attacks. Whether you're an individual researcher or part of a team within a Security Operations Center (SoC), you'll learn to approach, track, and attribute attacks to these advanced actors.

The first part of the book is an overview of actual cyber attacks conducted by nation-state actors and other advanced organizations. It explores the geopolitical context in which the attacks took place, the patterns found in the attackers' techniques, and the supporting evidence analysts used to attribute such attacks. Dive into the mechanisms of:

North Korea's series of cyber attacks against financial institutions, which resulted in billions of dollars stolen

The world of targeted ransomware attacks, which have leveraged nation state tactics to cripple entire corporate enterprises with ransomware

Recent cyber attacks aimed at disrupting or influencing national elections globally

The book's second part walks through how defenders can track and attribute future attacks. You'll be provided with the tools, methods, and analytical guidance required to dissect and research each stage of an attack campaign. Here, Jon DiMaggio demonstrates some of the real techniques he has employed to uncover crucial information about the 2021 Colonial Pipeline attacks, among many other advanced threats. He now offers his experience to train the next generation of expert analysts.

Review Quotes

"Encompasses useful knowledge from the past and modern advanced threats seen today. Regardless of your expertise level, this book is an insightful read . . ."
--Brittany Day, Director of Communications, Guardian Digital

"For those looking for a guide to help them understand the new world of cyberwar, The Art of Cyberwarfare provides readers with a good overview of this expanding threat and what they can do to avoid being victims."
--Ben Rothke, Senior Information Security Manager, Tapad

"An informative and explanatory guide for cybersecurity experts and an enlightening read for novices. DiMaggio effectively details both the history of cybercrime and how it is seen today."
--Justice Levine, Communications Manager and Cloud Email Security Expert, Guardian Digital

"This book deserves to find a place on the shelf of everyone whose role involves protecting networks."
--Ian Barker, BetaNews

"A cross between an IBM presentation . . . and a Tom Clancy novel!"
--The Shepherdess, Amazon Reviewer

About the Author

Jon DiMaggio is a seasoned cybersecurity expert specializing in hunting, researching, and writing about advanced cyber threats. His career began in the intelligence community as a Signals Intelligence (SIGINT) analyst supporting government agencies. He has developed extensive expertise in enterprise ransomware attacks and nation-state intrusions, particularly through conducting human intelligence (HUMINT) operations to infiltrate ransomware gangs. In 2024 his research series The Ransomware Diaries delivered crucial insights that helped law enforcement disrupt the LockBit Ransomware operation.

Jon is a two-time recipient of the SANS Difference Makers Award (2022, 2023), and his research has appeared in leading media outlets including the New York Times, Wired, Bloomberg, Fox, CNN, and Reuters. In 2024, he appeared on CBS's 60 Minutes to discuss his experiences infiltrating ransomware operations. He frequently presents at major cybersecurity conferences including RSA and DEFCON.