The art of deception : controlling the human element of security.
- Type:
- boek
- Titel:
- The art of deception : controlling the human element of security.
- Jaar:
- 2002
- Taal:
- Engels
- Uitgever:
- Indianapolis : Wiley, 2002
- Paginering:
- XVI, 352 p.
- Plaatsnummer:
- PENTA.521.5 MITN 02 (PENTA)
- Onderwerp:
- Informatiebeveiliging
- Samenvatting:
- The Art of Deception is about gaining someone's trust by lying to them and then abusing that trust for fun and profit. Hackers use the euphemism "social engineering" and hacker-guru Kevin Mitnick examines many example scenarios. After Mitnick's first dozen examples anyone responsible for organisational security is going to lose the will to live. It's been said before but people and security are antithetical. Organisations exist to provide a good or service and want helpful friendly employees to promote the good or service. People are social animals who want to be liked. Controlling the human aspects of security means denying someone something. This circle can't be squared. Considering Mitnick's reputation as a hacker guru the least and last point of attack for hackers using social engineering are computers. Most of the scenarios in The Art of Deception work just as well against computer-free organisations and were probably known to the Pheonicians. Technology simply makes it all easier. Phones are faster than letters after all and large organisations mean dealing with lots of strangers...
- Permalink:
- http://bibtest.howest.be/catalog/hws01:001926770