Privileged Attack Vectors

Privileged Attack Vectors Book in PDF, ePub and Kindle version is available to download in english. Read online anytime anywhere directly from your device. Click on the download button below to get a free pdf file of Privileged Attack Vectors book. This book definitely worth reading, it is an incredibly well-written.

Privileged Attack Vectors

Morey J. Haber
Privileged Attack Vectors Book PDF

Author : Morey J. Haber
Publisher : Apress
Page : 403 pages
File Size : 54,8 Mb
Release : 2020-06-13
Category : Computers
ISBN : 9781484259146

Get Book

Privileged Attack Vectors by Morey J. Haber Pdf

See how privileges, insecure passwords, administrative rights, and remote access can be combined as an attack vector to breach any organization. Cyber attacks continue to increase in volume and sophistication. It is not a matter of if, but when, your organization will be breached. Threat actors target the path of least resistance: users and their privileges. In decades past, an entire enterprise might be sufficiently managed through just a handful of credentials. Today’s environmental complexity has seen an explosion of privileged credentials for many different account types such as domain and local administrators, operating systems (Windows, Unix, Linux, macOS, etc.), directory services, databases, applications, cloud instances, networking hardware, Internet of Things (IoT), social media, and so many more. When unmanaged, these privileged credentials pose a significant threat from external hackers and insider threats. We are experiencing an expanding universe of privileged accounts almost everywhere. There is no one solution or strategy to provide the protection you need against all vectors and stages of an attack. And while some new and innovative products will help protect against or detect against a privilege attack, they are not guaranteed to stop 100% of malicious activity. The volume and frequency of privilege-based attacks continues to increase and test the limits of existing security controls and solution implementations. Privileged Attack Vectors details the risks associated with poor privilege management, the techniques that threat actors leverage, and the defensive measures that organizations should adopt to protect against an incident, protect against lateral movement, and improve the ability to detect malicious activity due to the inappropriate usage of privileged credentials. This revised and expanded second edition covers new attack vectors, has updated definitions for privileged access management (PAM), new strategies for defense, tested empirical steps for a successful implementation, and includes new disciplines for least privilege endpoint management and privileged remote access. What You Will Learn Know how identities, accounts, credentials, passwords, and exploits can be leveraged to escalate privileges during an attack Implement defensive and monitoring strategies to mitigate privilege threats and risk Understand a 10-step universal privilege management implementation plan to guide you through a successful privilege access management journeyDevelop a comprehensive model for documenting risk, compliance, and reporting based on privilege session activity Who This Book Is For Security management professionals, new security professionals, and auditors looking to understand and solve privilege access management problems

Identity Attack Vectors

Morey J. Haber,Darran Rolls
Identity Attack Vectors Book PDF

Author : Morey J. Haber,Darran Rolls
Publisher : Apress
Page : 205 pages
File Size : 41,7 Mb
Release : 2019-12-17
Category : Computers
ISBN : 9781484251652

Get Book

Identity Attack Vectors by Morey J. Haber,Darran Rolls Pdf

Discover how poor identity and privilege management can be leveraged to compromise accounts and credentials within an organization. Learn how role-based identity assignments, entitlements, and auditing strategies can be implemented to mitigate the threats leveraging accounts and identities and how to manage compliance for regulatory initiatives. As a solution, Identity Access Management (IAM) has emerged as the cornerstone of enterprise security. Managing accounts, credentials, roles, certification, and attestation reporting for all resources is now a security and compliance mandate. When identity theft and poor identity management is leveraged as an attack vector, risk and vulnerabilities increase exponentially. As cyber attacks continue to increase in volume and sophistication, it is not a matter of if, but when, your organization will have an incident. Threat actors target accounts, users, and their associated identities, to conduct their malicious activities through privileged attacks and asset vulnerabilities. Identity Attack Vectors details the risks associated with poor identity management practices, the techniques that threat actors and insiders leverage, and the operational best practices that organizations should adopt to protect against identity theft and account compromises, and to develop an effective identity governance program. What You Will Learn Understand the concepts behind an identity and how their associated credentials and accounts can be leveraged as an attack vector Implement an effective Identity Access Management (IAM) program to manage identities and roles, and provide certification for regulatory compliance See where identity management controls play a part of the cyber kill chain and how privileges should be managed as a potential weak link Build upon industry standards to integrate key identity management technologies into a corporate ecosystem Plan for a successful deployment, implementation scope, measurable risk reduction, auditing and discovery, regulatory reporting, and oversight based on real-world strategies to prevent identity attack vectors Who This Book Is For Management and implementers in IT operations, security, and auditing looking to understand and implement an identity access management program and manage privileges in these environments

Asset Attack Vectors

Morey J. Haber,Brad Hibbert
Asset Attack Vectors Book PDF

Author : Morey J. Haber,Brad Hibbert
Publisher : Apress
Page : 391 pages
File Size : 41,9 Mb
Release : 2018-06-15
Category : Computers
ISBN : 9781484236277

Get Book

Asset Attack Vectors by Morey J. Haber,Brad Hibbert Pdf

Build an effective vulnerability management strategy to protect your organization’s assets, applications, and data. Today’s network environments are dynamic, requiring multiple defenses to mitigate vulnerabilities and stop data breaches. In the modern enterprise, everything connected to the network is a target. Attack surfaces are rapidly expanding to include not only traditional servers and desktops, but also routers, printers, cameras, and other IOT devices. It doesn’t matter whether an organization uses LAN, WAN, wireless, or even a modern PAN—savvy criminals have more potential entry points than ever before. To stay ahead of these threats, IT and security leaders must be aware of exposures and understand their potential impact. Asset Attack Vectors will help you build a vulnerability management program designed to work in the modern threat environment. Drawing on years of combined experience, the authors detail the latest techniques for threat analysis, risk measurement, and regulatory reporting. They also outline practical service level agreements (SLAs) for vulnerability management and patch management. Vulnerability management needs to be more than a compliance check box; it should be the foundation of your organization’s cybersecurity strategy. Read Asset Attack Vectors to get ahead of threats and protect your organization with an effective asset protection strategy. What You’ll Learn Create comprehensive assessment and risk identification policies and procedures Implement a complete vulnerability management workflow in nine easy steps Understand the implications of active, dormant, and carrier vulnerability states Develop, deploy, and maintain custom and commercial vulnerability management programs Discover the best strategies for vulnerability remediation, mitigation, and removal Automate credentialed scans that leverage least-privilege access principles Read real-world case studies that share successful strategies and reveal potential pitfalls Who This Book Is For New and intermediate security management professionals, auditors, and information technology staff looking to build an effective vulnerability management program and defend against asset based cyberattacks

Privilege Escalation Techniques

Alexis Ahmed
Privilege Escalation Techniques Book PDF

Author : Alexis Ahmed
Publisher : Packt Publishing Ltd
Page : 340 pages
File Size : 42,9 Mb
Release : 2021-11-25
Category : Computers
ISBN : 9781801073479

Get Book

Privilege Escalation Techniques by Alexis Ahmed Pdf

Escalate your privileges on Windows and Linux platforms with step-by-step instructions and deepen your theoretical foundations Key FeaturesDiscover a range of techniques to escalate privileges on Windows and Linux systemsUnderstand the key differences between Windows and Linux privilege escalationExplore unique exploitation challenges in each chapter provided in the form of pre-built VMsBook Description Privilege Escalation Techniques is a detailed guide to privilege escalation techniques and tools for both Windows and Linux systems. This is a one-of-a-kind resource that will deepen your understanding of both platforms and provide detailed, easy-to-follow instructions for your first foray into privilege escalation. The book uses virtual environments that you can download to test and run tools and techniques. After a refresher on gaining access and surveying systems, each chapter will feature an exploitation challenge in the form of pre-built virtual machines (VMs). As you progress, you will learn how to enumerate and exploit a target Linux or Windows system. You'll then get a demonstration on how you can escalate your privileges to the highest level. By the end of this book, you will have gained all the knowledge and skills you need to be able to perform local kernel exploits, escalate privileges through vulnerabilities in services, maintain persistence, and enumerate information from the target such as passwords and password hashes. What you will learnUnderstand the privilege escalation process and set up a pentesting labGain an initial foothold on the systemPerform local enumeration on target systemsExploit kernel vulnerabilities on Windows and Linux systemsPerform privilege escalation through password looting and finding stored credentialsGet to grips with performing impersonation attacksExploit Windows services such as the secondary logon handle service to escalate Windows privilegesEscalate Linux privileges by exploiting scheduled tasks and SUID binariesWho this book is for If you're a pentester or a cybersecurity student interested in learning how to perform various privilege escalation techniques on Windows and Linux systems – including exploiting bugs and design flaws – then this book is for you. You'll need a solid grasp on how Windows and Linux systems work along with fundamental cybersecurity knowledge before you get started.

Container Security

Liz Rice
Container Security Book PDF

Author : Liz Rice
Publisher : "O'Reilly Media, Inc."
Page : 200 pages
File Size : 47,5 Mb
Release : 2020-04-06
Category : Computers
ISBN : 9781492056713

Get Book

Container Security by Liz Rice Pdf

To facilitate scalability and resilience, many organizations now run applications in cloud native environments using containers and orchestration. But how do you know if the deployment is secure? This practical book examines key underlying technologies to help developers, operators, and security professionals assess security risks and determine appropriate solutions. Author Liz Rice, Chief Open Source Officer at Isovalent, looks at how the building blocks commonly used in container-based systems are constructed in Linux. You'll understand what's happening when you deploy containers and learn how to assess potential security risks that could affect your deployments. If you run container applications with kubectl or docker and use Linux command-line tools such as ps and grep, you're ready to get started. Explore attack vectors that affect container deployments Dive into the Linux constructs that underpin containers Examine measures for hardening containers Understand how misconfigurations can compromise container isolation Learn best practices for building container images Identify container images that have known software vulnerabilities Leverage secure connections between containers Use security tooling to prevent attacks on your deployment

Zero Trust Networks

Evan Gilman,Doug Barth
Zero Trust Networks Book PDF

Author : Evan Gilman,Doug Barth
Publisher : "O'Reilly Media, Inc."
Page : 240 pages
File Size : 40,9 Mb
Release : 2017-06-19
Category : Computers
ISBN : 9781491962169

Get Book

Zero Trust Networks by Evan Gilman,Doug Barth Pdf

The perimeter defenses guarding your network perhaps are not as secure as you think. Hosts behind the firewall have no defenses of their own, so when a host in the "trusted" zone is breached, access to your data center is not far behind. That’s an all-too-familiar scenario today. With this practical book, you’ll learn the principles behind zero trust architecture, along with details necessary to implement it. The Zero Trust Model treats all hosts as if they’re internet-facing, and considers the entire network to be compromised and hostile. By taking this approach, you’ll focus on building strong authentication, authorization, and encryption throughout, while providing compartmentalized access and better operational agility. Understand how perimeter-based defenses have evolved to become the broken model we use today Explore two case studies of zero trust in production networks on the client side (Google) and on the server side (PagerDuty) Get example configuration for open source tools that you can use to build a zero trust network Learn how to migrate from a perimeter-based network to a zero trust network in production

Cybersecurity - Attack and Defense Strategies

Yuri Diogenes,Dr. Erdal Ozkaya
Cybersecurity Attack and Defense Strategies Book PDF

Author : Yuri Diogenes,Dr. Erdal Ozkaya
Publisher : Packt Publishing Ltd
Page : 368 pages
File Size : 43,7 Mb
Release : 2018-01-30
Category : Computers
ISBN : 9781788473859

Get Book

Cybersecurity - Attack and Defense Strategies by Yuri Diogenes,Dr. Erdal Ozkaya Pdf

Key Features Gain a clear understanding of the attack methods, and patterns to recognize abnormal behavior within your organization with Blue Team tactics Learn to unique techniques to gather exploitation intelligence, identify risk and demonstrate impact with Red Team and Blue Team strategies A practical guide that will give you hands-on experience to mitigate risks and prevent attackers from infiltrating your system Book DescriptionThe book will start talking about the security posture before moving to Red Team tactics, where you will learn the basic syntax for the Windows and Linux tools that are commonly used to perform the necessary operations. You will also gain hands-on experience of using new Red Team techniques with powerful tools such as python and PowerShell, which will enable you to discover vulnerabilities in your system and how to exploit them. Moving on, you will learn how a system is usually compromised by adversaries, and how they hack user's identity, and the various tools used by the Red Team to find vulnerabilities in a system. In the next section, you will learn about the defense strategies followed by the Blue Team to enhance the overall security of a system. You will also learn about an in-depth strategy to ensure that there are security controls in each network layer, and how you can carry out the recovery process of a compromised system. Finally, you will learn how to create a vulnerability management strategy and the different techniques for manual log analysis.What you will learn Learn the importance of having a solid foundation for your security posture Understand the attack strategy using cyber security kill chain Learn how to enhance your defense strategy by improving your security policies, hardening your network, implementing active sensors, and leveraging threat intelligence Learn how to perform an incident investigation Get an in-depth understanding of the recovery process Understand continuous security monitoring and how to implement a vulnerability management strategy Learn how to perform log analysis to identify suspicious activities Who this book is for This book aims at IT professional who want to venture the IT security domain. IT pentester, Security consultants, and ethical hackers will also find this course useful. Prior knowledge of penetration testing would be beneficial.

Network Vulnerability Assessment

Sagar Rahalkar
Network Vulnerability Assessment Book PDF

Author : Sagar Rahalkar
Publisher : Packt Publishing Ltd
Page : 243 pages
File Size : 42,9 Mb
Release : 2018-08-31
Category : Computers
ISBN : 9781788624725

Get Book

Network Vulnerability Assessment by Sagar Rahalkar Pdf

Build a network security threat model with this comprehensive learning guide Key Features Develop a network security threat model for your organization Gain hands-on experience in working with network scanning and analyzing tools Learn to secure your network infrastructure Book Description The tech world has been taken over by digitization to a very large extent, and so it’s become extremely important for an organization to actively design security mechanisms for their network infrastructures. Analyzing vulnerabilities can be one of the best ways to secure your network infrastructure. Network Vulnerability Assessment starts with network security assessment concepts, workflows, and architectures. Then, you will use open source tools to perform both active and passive network scanning. As you make your way through the chapters, you will use these scanning results to analyze and design a threat model for network security. In the concluding chapters, you will dig deeper into concepts such as IP network analysis, Microsoft Services, and mail services. You will also get to grips with various security best practices, which will help you build your network security mechanism. By the end of this book, you will be in a position to build a security framework fit for an organization. What you will learn Develop a cost-effective end-to-end vulnerability management program Implement a vulnerability management program from a governance perspective Learn about various standards and frameworks for vulnerability assessments and penetration testing Understand penetration testing with practical learning on various supporting tools and techniques Gain insight into vulnerability scoring and reporting Explore the importance of patching and security hardening Develop metrics to measure the success of the vulnerability management program Who this book is for Network Vulnerability Assessment is for security analysts, threat analysts, and any security professionals responsible for developing a network threat model for an organization. This book is also for any individual who is or wants to be part of a vulnerability management team and implement an end-to-end robust vulnerability management program.

Enterprise Cybersecurity

Scott Donaldson,Stanley Siegel,Chris K. Williams,Abdul Aslam
Enterprise Cybersecurity Book PDF

Author : Scott Donaldson,Stanley Siegel,Chris K. Williams,Abdul Aslam
Publisher : Apress
Page : 508 pages
File Size : 52,8 Mb
Release : 2015-05-23
Category : Computers
ISBN : 9781430260837

Get Book

Enterprise Cybersecurity by Scott Donaldson,Stanley Siegel,Chris K. Williams,Abdul Aslam Pdf

Enterprise Cybersecurity empowers organizations of all sizes to defend themselves with next-generation cybersecurity programs against the escalating threat of modern targeted cyberattacks. This book presents a comprehensive framework for managing all aspects of an enterprise cybersecurity program. It enables an enterprise to architect, design, implement, and operate a coherent cybersecurity program that is seamlessly coordinated with policy, programmatics, IT life cycle, and assessment. Fail-safe cyberdefense is a pipe dream. Given sufficient time, an intelligent attacker can eventually defeat defensive measures protecting an enterprise’s computer systems and IT networks. To prevail, an enterprise cybersecurity program must manage risk by detecting attacks early enough and delaying them long enough that the defenders have time to respond effectively. Enterprise Cybersecurity shows players at all levels of responsibility how to unify their organization’s people, budgets, technologies, and processes into a cost-efficient cybersecurity program capable of countering advanced cyberattacks and containing damage in the event of a breach. The authors of Enterprise Cybersecurity explain at both strategic and tactical levels how to accomplish the mission of leading, designing, deploying, operating, managing, and supporting cybersecurity capabilities in an enterprise environment. The authors are recognized experts and thought leaders in this rapidly evolving field, drawing on decades of collective experience in cybersecurity and IT. In capacities ranging from executive strategist to systems architect to cybercombatant, Scott E. Donaldson, Stanley G. Siegel, Chris K. Williams, and Abdul Aslam have fought on the front lines of cybersecurity against advanced persistent threats to government, military, and business entities.

Cyber Security Essentials

James Graham,Ryan Olson,Rick Howard
Cyber Security Essentials Book PDF

Author : James Graham,Ryan Olson,Rick Howard
Publisher : CRC Press
Page : 342 pages
File Size : 49,6 Mb
Release : 2016-04-19
Category : Business & Economics
ISBN : 9781439851265

Get Book

Cyber Security Essentials by James Graham,Ryan Olson,Rick Howard Pdf

The sophisticated methods used in recent high-profile cyber incidents have driven many to need to understand how such security issues work. Demystifying the complexity often associated with information assurance, Cyber Security Essentials provides a clear understanding of the concepts behind prevalent threats, tactics, and procedures.To accomplish

A Guide to Kernel Exploitation

Enrico Perla,Massimiliano Oldani
A Guide to Kernel Exploitation Book PDF

Author : Enrico Perla,Massimiliano Oldani
Publisher : Elsevier
Page : 464 pages
File Size : 45,5 Mb
Release : 2010-10-28
Category : Computers
ISBN : 1597494879

Get Book

A Guide to Kernel Exploitation by Enrico Perla,Massimiliano Oldani Pdf

A Guide to Kernel Exploitation: Attacking the Core discusses the theoretical techniques and approaches needed to develop reliable and effective kernel-level exploits, and applies them to different operating systems, namely, UNIX derivatives, Mac OS X, and Windows. Concepts and tactics are presented categorically so that even when a specifically detailed vulnerability has been patched, the foundational information provided will help hackers in writing a newer, better attack; or help pen testers, auditors, and the like develop a more concrete design and defensive structure. The book is organized into four parts. Part I introduces the kernel and sets out the theoretical basis on which to build the rest of the book. Part II focuses on different operating systems and describes exploits for them that target various bug classes. Part III on remote kernel exploitation analyzes the effects of the remote scenario and presents new techniques to target remote issues. It includes a step-by-step analysis of the development of a reliable, one-shot, remote exploit for a real vulnerabilitya bug affecting the SCTP subsystem found in the Linux kernel. Finally, Part IV wraps up the analysis on kernel exploitation and looks at what the future may hold. Covers a range of operating system families — UNIX derivatives, Mac OS X, Windows Details common scenarios such as generic memory corruption (stack overflow, heap overflow, etc.) issues, logical bugs and race conditions Delivers the reader from user-land exploitation to the world of kernel-land (OS) exploits/attacks, with a particular focus on the steps that lead to the creation of successful techniques, in order to give to the reader something more than just a set of tricks

Writing Secure Code

David LeBlanc,Michael Howard
Writing Secure Code Book PDF

Author : David LeBlanc,Michael Howard
Publisher : Pearson Education
Page : 800 pages
File Size : 50,9 Mb
Release : 2002-12-04
Category : Computers
ISBN : 9780735637405

Get Book

Writing Secure Code by David LeBlanc,Michael Howard Pdf

Keep black-hat hackers at bay with the tips and techniques in this entertaining, eye-opening book! Developers will learn how to padlock their applications throughout the entire development process—from designing secure applications to writing robust code that can withstand repeated attacks to testing applications for security flaws. Easily digested chapters reveal proven principles, strategies, and coding techniques. The authors—two battle-scarred veterans who have solved some of the industry’s toughest security problems—provide sample code in several languages. This edition includes updated information about threat modeling, designing a security process, international issues, file-system issues, adding privacy to applications, and performing security code reviews. It also includes enhanced coverage of buffer overruns, Microsoft .NET security, and Microsoft ActiveX development, plus practical checklists for developers, testers, and program managers.

Hands-On Cybersecurity for Finance

Dr. Erdal Ozkaya,Milad Aslaner
Hands On Cybersecurity for Finance Book PDF

Author : Dr. Erdal Ozkaya,Milad Aslaner
Publisher : Packt Publishing Ltd
Page : 300 pages
File Size : 45,6 Mb
Release : 2019-01-31
Category : Computers
ISBN : 9781788831734

Get Book

Hands-On Cybersecurity for Finance by Dr. Erdal Ozkaya,Milad Aslaner Pdf

A comprehensive guide that will give you hands-on experience to study and overcome financial cyber threats Key FeaturesProtect your financial environment with cybersecurity practices and methodologiesIdentify vulnerabilities such as data manipulation and fraudulent transactionsProvide end-to-end protection within organizationsBook Description Organizations have always been a target of cybercrime. Hands-On Cybersecurity for Finance teaches you how to successfully defend your system against common cyber threats, making sure your financial services are a step ahead in terms of security. The book begins by providing an overall description of cybersecurity, guiding you through some of the most important services and technologies currently at risk from cyber threats. Once you have familiarized yourself with the topic, you will explore specific technologies and threats based on case studies and real-life scenarios. As you progress through the chapters, you will discover vulnerabilities and bugs (including the human risk factor), gaining an expert-level view of the most recent threats. You'll then explore information on how you can achieve data and infrastructure protection. In the concluding chapters, you will cover recent and significant updates to procedures and configurations, accompanied by important details related to cybersecurity research and development in IT-based financial services. By the end of the book, you will have gained a basic understanding of the future of information security and will be able to protect financial services and their related infrastructures. What you will learnUnderstand the cyber threats faced by organizationsDiscover how to identify attackersPerform vulnerability assessment, software testing, and pentestingDefend your financial cyberspace using mitigation techniques and remediation plansImplement encryption and decryptionUnderstand how Artificial Intelligence (AI) affects cybersecurityWho this book is for Hands-On Cybersecurity for Finance is for you if you are a security architect, cyber risk manager, or pentester looking to secure your organization. Basic understanding of cybersecurity tools and practices will help you get the most out of this book.

Wireshark for Security Professionals

Jessey Bullock,Jeff T. Parker
Wireshark for Security Professionals Book PDF

Author : Jessey Bullock,Jeff T. Parker
Publisher : John Wiley & Sons
Page : 288 pages
File Size : 50,9 Mb
Release : 2017-03-20
Category : Computers
ISBN : 9781118918210

Get Book

Wireshark for Security Professionals by Jessey Bullock,Jeff T. Parker Pdf

Master Wireshark to solve real-world security problems If you don’t already use Wireshark for a wide range of information security tasks, you will after this book. Mature and powerful, Wireshark is commonly used to find root cause of challenging network issues. This book extends that power to information security professionals, complete with a downloadable, virtual lab environment. Wireshark for Security Professionals covers both offensive and defensive concepts that can be applied to essentially any InfoSec role. Whether into network security, malware analysis, intrusion detection, or penetration testing, this book demonstrates Wireshark through relevant and useful examples. Master Wireshark through both lab scenarios and exercises. Early in the book, a virtual lab environment is provided for the purpose of getting hands-on experience with Wireshark. Wireshark is combined with two popular platforms: Kali, the security-focused Linux distribution, and the Metasploit Framework, the open-source framework for security testing. Lab-based virtual systems generate network traffic for analysis, investigation and demonstration. In addition to following along with the labs you will be challenged with end-of-chapter exercises to expand on covered material. Lastly, this book explores Wireshark with Lua, the light-weight programming language. Lua allows you to extend and customize Wireshark’s features for your needs as a security professional. Lua source code is available both in the book and online. Lua code and lab source code are available online through GitHub, which the book also introduces. The book’s final two chapters greatly draw on Lua and TShark, the command-line interface of Wireshark. By the end of the book you will gain the following: Master the basics of Wireshark Explore the virtual w4sp-lab environment that mimics a real-world network Gain experience using the Debian-based Kali OS among other systems Understand the technical details behind network attacks Execute exploitation and grasp offensive and defensive activities, exploring them through Wireshark Employ Lua to extend Wireshark features and create useful scripts To sum up, the book content, labs and online material, coupled with many referenced sources of PCAP traces, together present a dynamic and robust manual for information security professionals seeking to leverage Wireshark.

Communities in Action

National Academies of Sciences, Engineering, and Medicine,Health and Medicine Division,Board on Population Health and Public Health Practice,Committee on Community-Based Solutions to Promote Health Equity in the United States
Communities in Action Book PDF

Author : National Academies of Sciences, Engineering, and Medicine,Health and Medicine Division,Board on Population Health and Public Health Practice,Committee on Community-Based Solutions to Promote Health Equity in the United States
Publisher : National Academies Press
Page : 583 pages
File Size : 41,5 Mb
Release : 2017-04-27
Category : Medical
ISBN : 9780309452960

Get Book

Communities in Action by National Academies of Sciences, Engineering, and Medicine,Health and Medicine Division,Board on Population Health and Public Health Practice,Committee on Community-Based Solutions to Promote Health Equity in the United States Pdf

In the United States, some populations suffer from far greater disparities in health than others. Those disparities are caused not only by fundamental differences in health status across segments of the population, but also because of inequities in factors that impact health status, so-called determinants of health. Only part of an individual's health status depends on his or her behavior and choice; community-wide problems like poverty, unemployment, poor education, inadequate housing, poor public transportation, interpersonal violence, and decaying neighborhoods also contribute to health inequities, as well as the historic and ongoing interplay of structures, policies, and norms that shape lives. When these factors are not optimal in a community, it does not mean they are intractable: such inequities can be mitigated by social policies that can shape health in powerful ways. Communities in Action: Pathways to Health Equity seeks to delineate the causes of and the solutions to health inequities in the United States. This report focuses on what communities can do to promote health equity, what actions are needed by the many and varied stakeholders that are part of communities or support them, as well as the root causes and structural barriers that need to be overcome.