| ||||||||||||||||||||||||||||||
 Trade In this Item for up to £0.25
Trade in The Art of Deception: Controlling the Human Element of Security for an Amazon.co.uk gift card of up to £0.25, which you can then spend on millions of items across the site. Trade-in values may vary (terms apply). Find more products eligible for trade-in.
|
Frequently Bought Together
Product details
|
More About the Authors
Discover books, learn about writers, and more.
Product Description
Amazon.co.uk Review
After Mitnick's first dozen examples anyone responsible for organisational security is going to lose the will to live. It's been said before but people and security are antithetical. Organisations exist to provide a good or service and want helpful friendly employees to promote the good or service. People are social animals who want to be liked. Controlling the human aspects of security means denying someone something. This circle can't be squared.
Considering Mitnick's reputation as a hacker guru the least and last point of attack for hackers using social engineering are computers. Most of the scenarios in The Art of Deception work just as well against computer-free organisations and were probably known to the Pheonicians. Technology simply makes it all easier. Phones are faster than letters after all and large organisations mean dealing with lots of strangers.
Much of Mitnick's security advice sounds practical until you think about implementation, when you realise more effective security means reducing organisational efficiency: an impossible trade in competitive business. And anyway, who wants to work in an organisation where the rule is "Trust no one"? Mitnick shows how easily security is breached by trust, but without trust people can't live and work together. In the real world effective organisations have to acknowledge total security is a chimera--and carry more insurance. --Steve Patient
Computer Weekly, 23 January 2003
a company may have purchased the best security technologies that money can buy, trained their people so well that they lock up all their secrets before going home at night, and hired building guards from the best security firm in the business. Read the first page
Concordance
Front Cover | Copyright | Table of Contents | Excerpt | Index | Back Cover
Suggested Tags from Similar Products(What's this?)Be the first one to add a relevant tag (keyword that's strongly related to this product)
|
What Other Items Do Customers Buy After Viewing This Item?
Customer Reviews
|
Share your thoughts with other customers:
|
||||||||||||||||||||||
|
Most Helpful Customer Reviews
16 of 16 people found the following review helpful:
5.0 out of 5 stars
Hacking made frighteningly easy,
By
This review is from: The Art of Deception: Controlling the Human Element of Security (Paperback)
Story by story, Mitnick (once described as the FBI's "most wanted hacker") reveals some tricks-of-the-trade. Fair enough. But if you are expecting technical details about defeating system login controls or busting through firewalls, you will be disappointed. Mitnick's favorite hacking tools are the telephone, plus the experience and nerve to deceive unsuspecting members of the organizations he is attacking into defeating the controls from the inside. Reading this book, you will quickly come to realize that Mitnick's toolbox is every bit as effective as the hacking and cracking technology ... and as you read further, it may dawn on you just how hard it is to counter the social engineering attack. After all, much as you might like to, you can't simply plug in a new program to security-patch your employees! Mitnick's suggested countermeasures in section 4 of the book are fairly straightforward (a wide-ranging security awareness program and a decent set of policies) but implementing them effectively and persuading employees to pay attention requires those very social engineering skills described in sections 1-3. I'm left with the distinct impression that Mitnick is teasing us by describing a few simple deceptions whilst keeping the best to himself. But think for a moment about the success of the "419" advance fee scams. Otherwise sane, intelligent individuals are evidently being drawn into parting with their hard-earned cash on the basis of these crude deceptions. The implications are truly frightening. My bottom line: take this book on holiday with you. Once you start, you will not want to put it down and you can reflect on it at the bar. Free drinks anyone?
6 of 6 people found the following review helpful:
4.0 out of 5 stars
A good book for managment,
This review is from: The Art of Deception: Controlling the Human Element of Security (Hardcover)
Kevin Mitnick begins The Art of Deception by telling the reader about securities weakest link - people, and throughout the book he continues to labour this point, constantly reminding us that no matter how well computers are protected against potential hackers, it will 99% of the time be the employees who give away passwords, codes and other secret, and important information to people who will quite simply just have to ask for it.The book is very easy to read, it isn't full of computer jargon, which I personally thought it would be. The stories are told from the point of view of the hacker, an introduction describing each situation is given first, phone conversations are written down, the con is analyzed, and then Mitnick tells us how to avoid situations like that happening by 'preventing the con'. It is very easy to see when reading this book how the people (note, not the technology) get tricked or persuaded into giving away such vital information, the key is social engineering. These people believe that the hacker is someone within the organisation who should have access to this information anyway so no harm will come from giving it away, but how can they tell simply from one phone call? All in all, this book is an education in information security, it tells us that having firewalls, anti-virus software and other security equipment installed will help to protect your information system, but this alone will not be enough, the updates are a very important element in securing your information, and without these, your system will be even more vulnerable from attack by outsiders. Employees, without being educated in information security, can let you down, simply by being too trusting and not knowing who they are giving the information away to!
4 of 4 people found the following review helpful:
5.0 out of 5 stars
Well worth reading,
By Mick Juchnowicz (Douglas, Isle of Man United Kingdom) - See all my reviews
This review is from: The Art of Deception: Controlling the Human Element of Security (Hardcover)
An excellent read giving a great insight into how people can be easily duped. Not a handbook to begin hacking but an overview of techniques so that anybody who is worried about Information Security can be aware of the methods employed by Hackers and put in place procedures to prevent unauthorised access to data. Written by the "definitive" hacker who has now turned his energy and expertise to the benefit of all. Well written and easy to read even if you're not a techi'. Not full of jargon or assumptions. BUY IT NOW
Share your thoughts with other customers: Create your own review
Would you like to see more reviews about this item?
|
Most Recent Customer Reviews |
Customer Discussions
|
This product's forum
Active discussions in related forums
Search Customer Discussions
|
Related forums
|
Listmania!
Look for similar items by category
- Books > Business, Finance & Law > E-Commerce > Managers' Guides to Computing
- Books > Business, Finance & Law > Management > Information Management
- Books > Computing & Internet > Digital Lifestyle > Online Shopping > Amazon
- Books > Computing & Internet > Networking & Security > Network Topics
- Books > Computing & Internet > Networking & Security > Security > Cryptography & Encryption
- Books > Society, Politics & Philosophy > Social Sciences > Law & Disorder > Criminology
Look for similar items by subject
Feedback
- Would you like to update product info or give feedback on images?
- I am the Author, and I want to comment on my book.
- I am the Publisher, and I want to comment on this book.
|
