The Art of Deception
Subtitle: Controlling the Human Element of Security
By: by Kevin D. Mitnick.
Contributors: Steve Wozniak (Foreword)
Publisher: Wiley
Published: October 4, 2002
Language: eng
Format: eBook
Number of pages: 304
ISBN-13: 9780471237129
Copyright date: 2002
First sentence: a company may have purchased the best security technologies that money can buy, trained their people so well that they lock up all their secrets before going home at night, and hired building guards from the best security firm in the business.
Description: Focusing on the human factors involved with information security, Mitnick explains why all the firewalls and encryption protocols in the world will never be enough to stop a savvy grifter intent on rifling a corporate database or an irate employee determined to crash a system. With the help of many fascinating true stories of successful attacks on business and government, he illustrates just how susceptible even the most locked-down information systems are to a slick con artist impersonating an IRS agent. Narrating from the points of view of both the attacker and the victims, he explains why each attack was so successful and how it could have been prevented. Mitnick also offers advice for preventing these types of social engineering hacks through security protocols, training programs, and manuals that address the human element of security.
Table of contents: title: Security's Weakest Link; title: When Innocuous Information Isn't; title: The Direct Attack: Just Asking for It; title: Building Trust; title: "Let Me Help You"; title: "Can You Help Me?"; title: Phony Sites and Dangerous Attachments; title: Using Sympathy, Guilt, and Intimidation; title: The Reverse Sting; title: Entering the Premises; title: Combining Technology and Social Engineering; title: Attacks on the Entry-Level Employee; title: Clever Cons; title: Industrial Espionage; title: Information Security Awareness and Training; title: Recommended Corporate Information Security Policies