The Art of Deception: Controlling the Human Element of Security

By Kevin D. Mitnick, Nick Sullivan, William L Simon, et al.

Book Overview

Beim Schutz von Unternehmenswerten geht die grö te Gefahr von den Mitarbeitern des Unternehmens selbst aus. Obwohl die meisten Unternehmen die neuesten Sicherheitssysteme installieren, ignorieren sie... This description may be from another edition of this product.

• Format: Paperback
• Language: English
• ISBN: 076454280X
• ISBN13: 9780764542800
• Release Date: October 2003
• Publisher: Wiley
• Length: 368 Pages
• Weight: 1.03 lbs.
• Dimensions: 0.2" x 0.6" x 6.0"

Customer Reviews

Scary Stuff

When I picked this book up, I thought it was going to be an apologia from Mitnick for his prior life's work: cracking into supposedly secure phone and computer systems and networks. I read the book just before Hallowe'en, and that was appropriate, because the stories Mitnick recounts are really scary. Instead of wasting words explaining his own actions, Mitnick gives scores of fascinating examples of how most "security" proved...

Cuts to the chase, and exposes the weakest link...

This book cuts to the chase, and exposes what was, currently is, and will continue to be the weakest link in computer security... the human element. Historically, people seem to take the path of least resistance. Give them a reason to believe you are who you say you are, and they will accept it. Give them a reason to think you're helping them (even with a problem they never knew they had until you pointed it out to them),...

Interesting & timely about the dangers of social engineering

Kevin Mitnick says "the term 'social engineering' is widely used within the computer security community to describe the techniques hackers use to deceive a trusted computer user within a company into revealing sensitive information, or trick an unsuspecting mark into performing actions that create a security hole for them to slip through." It's suitable that Mitnick, once vilified for his cracking exploits, has written a book...

There are lessons here ...

While it's a temptation to impose value judgement about the author who is a convicted felon, I strongly urge anyone who is involved in security (IT and corporate), internal auditors and fraud prevention specialists to suspend any opinions of the author and to carefully read this book.What we in the IT world call 'social engineering' is nothing more than a con that exploits human trust. Mitnick was highly effective at social...

Amazing! This book will make you think

I went into this book thinking I knew a fair amount about security in general. You know, don't leave your network password on a post-it on your bulletin board, be aware of strangers in your office, that kind of thing. Then, I finished reading the book, and realized that it challenged all the assumptions that I had about the way I react in these situations. Mitnick's right - we as human beings are conditioned to be polite...