SEC504: Hacker Tools, Techniques, and Incident Handling
SEC504Offensive Operations
Out-of-Band Defense: Securing VPNs from Password-Spray Attacks with Cloud Automation
Out-of-Band Defense: Securing VPNs from Password-Spray Attacks with Cloud Automation (PDF, 0.87MB)Published: 12 May, 2025
Created by
SANS Institute
This research examines an out-of-band solution to detect and block password-spray attacks on Remote Access VPN services, addressing vulnerabilities like Cisco’s CVE-2024-20481 amid rising threats post-COVID-19.
Meet the expert
SANS Institute
Launched in 1989 as a cooperative for information security thought leadership, it is SANS’ ongoing mission to empower cyber security professionals with the practical skills and knowledge they need to make our world a safer place.
Read more about SANS InstituteAdditional resources
Related courses
- Slide 1 of 8
SEC540: Cloud Native Security and DevSecOps Automation
Intermediate SEC540Cloud Security
- GIAC Cloud Security Automation (GCSA)
- 5 Days (Instructor-Led)
- 38 CPEs / 38 Hours (Self-Paced)
- Labs: 35 Hours of hands-on instruction
- Slide 2 of 8
SEC522: Application Security: Securing Web Applications, APIs, and Microservices
Advanced SEC522Cloud Security
- GIAC Certified Web Application Defender (GWEB)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 21 Hours of hands-on instruction
- Slide 3 of 8
SEC545: GenAI and LLM Application Security
newAdvanced SEC545Cloud Security
- 3 Days (Instructor-Led)
- 18 CPEs / 18 Hours (Self-Paced)
- Labs: 11 Hours of hands-on instruction
- Slide 4 of 8
SEC549: Cloud Security Architecture
Intermediate SEC549Cloud Security
- GIAC Cloud Security Architecture and Design (GCAD)
- 5 Days (Instructor-Led)
- 30 CPEs / 30 Hours (Self-Paced)
- Labs: 35 Hours of hands-on instruction
- Slide 5 of 8
SEC510: Cloud Security Controls and Mitigations
Intermediate SEC510Cloud Security
- GIAC Public Cloud Security (GPCS)
- 5 Days (Instructor-Led)
- 38 CPEs / 38 Hours (Self-Paced)
- Labs: 24 Hours of hands-on instruction
- Slide 6 of 8
SEC488: Cloud Security Essentials
Major UpdatesEssentials SEC488Cloud Security
- GIAC Cloud Security Essentials
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 40 Hours of hands-on instruction
- Slide 7 of 8
SEC541: Cloud Security Threat Detection
Intermediate SEC541Cloud Security
- GIAC Cloud Threat Detection (GCTD)
- 5 Days (Instructor-Led)
- 30 CPEs / 30 Hours (Self-Paced)
- Labs: 22 Hours of hands-on instruction
- Slide 8 of 8
SEC480: AWS Secure Builder
Essentials SEC480Cloud Security
- GIAC AWS Secure Builder Micro-Credential
- 12 CPEs / 12 Hours (Self-Paced)
- Labs: 8 Hours of hands-on instruction