book

The Art of Deception: Controlling the Human Element of Security

by Kevin D. Mitnick, William L. Simon, Steve Wozniak

October 2003

Beginner

368 pages

9h 7m

English

Wiley

Read now

Unlock full access

STARTING OUTFrom Phone Phreak to HackerBecoming a Social EngineerFINAL THOUGHTS
1.1. THE HUMAN FACTOR1.2. A CLASSIC CASE OF DECEPTION1.3. THE NATURE OF THE THREAT1.4. ABUSE OF TRUST1.5. TERRORISTS AND DECEPTION1.6. ABOUT THIS BOOK
2.1. THE HIDDEN VALUE OF INFORMATION2.2. CREDITCHEX2.3. THE ENGINEER TRAP2.4. MORE "WORTHLESS" INFO2.5. PREVENTING THE CON
3.1. AN MLAC QUICKIE3.2. YOUNG MAN ON THE RUN3.3. ON THE DOORSTEP3.4. GAS ATTACK3.5. PREVENTING THE CON

4.1. TRUST: THE KEY TO DECEPTION4.2. VARIATION ON A THEME: CARD CAPTURE4.3. THE ONE-CENT CELL PHONE4.4. HACKING INTO THE FEDS4.5. PREVENTING THE CON
5.1. THE NETWORK OUTAGE5.2. A LITTLE HELP FOR THE NEW GAL5.3. NOT AS SAFE AS YOU THINK5.4. PREVENTING THE CON
6.1. THE OUT-OF-TOWNER6.2. SPEAKEASY SECURITY6.3. THE CARELESS COMPUTER MANAGER6.4. PREVENTING THE CON
7.1. "WOULDN'T YOU LIKE A FREE (BLANK)?"7.2. MESSAGE FROM A FRIEND7.3. VARIATIONS ON A THEME7.4. VARIATIONS ON THE VARIATION
8.1. A VISIT TO THE STUDIO8.2. "DO IT NOW"8.3. "MR. BIGG WANTS THIS"8.4. WHAT THE SOCIAL SECURITY ADMINISTRATION KNOWS ABOUT YOU8.5. ONE SIMPLE CALL8.6. THE POLICE RAID8.7. TURNING THE TABLES8.8. PREVENTING THE CON
9.1. THE ART OF FRIENDLY PERSUASION9.2. COPS AS DUPES9.3. PREVENTING THE CON
10.1. THE EMBARRASSED SECURITY GUARD10.2. DUMPSTER DIVING10.3. THE HUMILIATED BOSS10.4. THE PROMOTION SEEKER10.5. SNOOPING ON KEVIN10.6. PREVENTING THE CON
11.1. HACKING BEHIND BARS11.2. THE SPEEDY DOWNLOAD11.3. EASY MONEY11.4. THE DICTIONARY AS AN ATTACK TOOL11.5. PREVENTING THE CON
12.1. THE HELPFUL SECURITY GUARD12.2. THE EMERGENCY PATCH12.3. THE NEW GIRL12.4. PREVENTING THE CON
13.1. THE MISLEADING CALLER ID13.2. VARIATION: THE PRESIDENT OF THE UNITED STATES IS CALLING13.3. THE INVISIBLE EMPLOYEE13.4. THE HELPFUL SECRETARY13.5. TRAFFIC COURT13.6. SAMANTHA'S REVENGE13.7. PREVENTING THE CON
14.1. VARIATION ON A SCHEME14.2. THE NEW BUSINESS PARTNER14.3. LEAPFROG14.4. PREVENTING THE CON
15.1. SECURITY THROUGH TECHNOLOGY, TRAINING, AND PROCEDURES15.2. UNDERSTANDING HOW ATTACKERS TAKE ADVANTAGE OF HUMAN NATURE15.3. CREATING TRAINING AND AWARENESS PROGRAMS15.4. TESTING15.5. ONGOING AWARENESS15.6. WHAT'S IN IT FOR ME?
16.1. WHAT IS A SECURITY POLICY?16.2. DATA CLASSIFICATION16.3. VERIFICATION AND AUTHORIZATION PROCEDURES16.4. MANAGEMENT POLICIES16.5. INFORMATION TECHNOLOGY POLICIES16.6. POLICIES FOR ALL EMPLOYEES16.7. POLICIES FOR TELECOMMUTERS16.8. POLICIES FOR HUMAN RESOURCES16.9. POLICIES FOR PHYSICAL SECURITY16.10. POLICIES FOR RECEPTIONISTS16.11. POLICIES FOR THE INCIDENT REPORTING GROUP
IDENTIFYING A SECURITY ATTACKVERIFICATION AND DATA CLASSIFICATION
CHAPTER 1CHAPTER 2CHAPTER 16CHAPTER 17
FROM KEVIN MITNICKFROM BILL SIMON

Content preview from The Art of Deception: Controlling the Human Element of Security

sources

CHAPTER 1

BloomBecker, Buck. 1990. Spectacular Computer Crimes: What They Are and How They Cost American Business Half a Billion Dollars a Year. Irwin Professional Publishing.

Littman, Jonathan. 1997. The Fugitive Game: Online with Kevin Mitnick. Little Brown & Co.

Penenberg, Adam L. April 19, 1999. "The Demonizing of a Hacker." Forbes.

CHAPTER 2

The Stanley Rifkin story is based on the following accounts:

Computer Security Insitute. Undated. "Financial losses due to Internet intrusions, trade secret theft and other cyber crimes soar." Press release.
Epstein, Edward Jay. Unpublished. "The Diamond Invention.
"Holwick, Rev. David. Unpublished account.
Mr. Rifkin himself was gracious in acknowledging that accounts of his exploit differ because he has protected his anonymity by declining to be interviewed.

CHAPTER 16

Cialdini, Robert B. 2000. Influence: Science and Practice, 4th edition. Allyn and Bacon.

Cialdini, Robert B. February 2001. "The Science of Persuasion." Scientific American. 284:2.

CHAPTER 17

Some policies in this chapter are based on ideas contained in: Wood, Charles Cresson. 1999. "Information Security Policies Made Easy." Baseline Software.

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Start your free trial

The Art of Social Engineering

Cesar Bravo, Desilda Toska

The Art of War for Security Managers: 10 Steps to Enhancing Organizational Effectiveness

Scott Watson

Social Engineering: The Art of Human Hacking

Christopher Hadnagy

The Art of Leadership

Michael Lopp

Publisher Resources

ISBN: 9780764542800Purchase book