The Art of Deception
Controlling the Human Element of Security
Résumé
Kevin Mitnick's exploits as a cyber-desperado and
fugitive from one of the most exhaustive FBI manhunts in
history have spawned dozens of articles, books, films, and
documentaries. Since his release from federal prison in
2000, Mitnick has turned his life around and established
himself as one of the most sought-after computer security
experts worldwide. Now, in The Art of Deception, the
world's most famous hacker gives new meaning to the old
adage, "It takes a thief to catch a thief."
Inviting you into the complex mind of the hacker, Mitnick
provides realistic scenarios of cons, swindles, and social
engineering attacks on businesses -- and the consequences.
Focusing on the human factors involved with information
security, Mitnick explains why all the firewalls and
encryption protocols in the world will never be enough to
stop a savvy grifter intent on rifling a corporate database
or an irate employee determined to crash a system. He
illustrates just how susceptible even the most locked-down
information systems are to a determined con artist
impersonating an IRS agent or any other seemingly innocent
character. Narrated from the points of view of both the
attacker and the victim, The Art of Deception explores why
each attack was so successful -- and how it could have been
averted -- in an engaging and highly readable manner
reminiscent of a true-crime novel.
Most importantly, Mitnick redeems his former life of crime
by providing specific guidelines for developing protocols,
training programs, and manuals to ensure that a company's
sophisticated technical security investment will not be for
naught. He shares his advice for preventing security
vulnerability in the hope that people will be mindfully on
guard for an attack from the gravest risk of all -- human
nature.
-
Part 1: Behind the Scenes.
- Chapter 1: Security's Weakest Link.
-
Part 2: The Art of the Attacker.
- Chapter 2: When Innocuous Information Isn't.
- Chapter 3: The Direct Attack: Just Asking for It.
- Chapter 4: Building Trust.
- Chapter 5: "Let Me Help You".
- Chapter 6: "Can You Help Me?".
- Chapter 7: Phony Sites and Dangerous Attachments.
- Chapter 8: Using Sympathy, Guilt, and Intimidation.
- Chapter 9: The Reverse Sting.
-
Part 3: Intruder Alert.
- Chapter 10: Entering the Premises.
- Chapter 11: Combining Technology and Social Engineering.
- Chapter 12: Attacks on the Entry-Level Employee.
- Chapter 13: Clever Cons.
- Chapter 14: Industrial Espionage.
-
Part 4: Raising the Bar.
- Chapter 15: Information Security Awareness and Training.
- Chapter 16: Recommended Corporate Information Security Policies.
- Security at a Glance
L'auteur - William L. Simon
William L. Simon is the coauthor of Kevin Mitnick's The Art of Deception and The Art of Intrusion (both published by Wiley) as well as the award-winning author of more than twenty other books.
Autres livres de William L. Simon
Caractéristiques techniques
PAPIER | |
Éditeur(s) | Wiley |
Auteur(s) | William L. Simon |
Parution | 14/01/2003 |
Nb. de pages | 352 |
Format | 16 x 24 |
Couverture | Broché |
Poids | 620g |
Intérieur | Noir et Blanc |
EAN13 | 9780471237129 |
ISBN13 | 978-0-471-23712-9 |
Avantages Eyrolles.com
Nos clients ont également acheté
Consultez aussi
- Les meilleures ventes en Graphisme & Photo
- Les meilleures ventes en Informatique
- Les meilleures ventes en Construction
- Les meilleures ventes en Entreprise & Droit
- Les meilleures ventes en Sciences
- Les meilleures ventes en Littérature
- Les meilleures ventes en Arts & Loisirs
- Les meilleures ventes en Vie pratique
- Les meilleures ventes en Voyage et Tourisme
- Les meilleures ventes en BD et Jeunesse
- Informatique Informatique d'entreprise Sécurité
- Informatique Réseaux et télecommunications Ouvrages généraux
- Informatique Réseaux et télecommunications Protocoles et standards
- Informatique Réseaux et télecommunications Administration réseau
- Informatique Réseaux et télecommunications Sécurité réseau
- Informatique Réseaux et télecommunications Sécurité réseau Sécurité internet