资源描述:
《art of deception - controlling the human element of security - kevin 》由会员上传分享,免费在线阅读,更多相关内容在行业资料-天天文库。
1、ArtofDeception-ControllingtheHumanElementofSecurity-KevinMitnick.doc(1169KB)PobierzScannedbykineticstompTHEARTOFDECEPTIONControllingtheHumanElementofSecurityKEVIND.MITNICK&WilliamL.SimonForewordbySteveWozniak ForRebaVartanian,ShellyJaffe,ChickieLeventhal,andMitchellMitni
2、ck,andforthelateAlanMitnick,AdamMitnick,andJackBiello ForArynne,Victoria,andDavid,Sheldon,Vincent,andElena. SocialEngineeringSocialEngineeringusesinfluenceandpersuasiontodeceivepeoplebyconvincingthemthatthesocialengineerissomeoneheisnot,orbymanipulation.Asaresult,thesoc
3、ialengineerisabletotakeadvantageofpeopletoobtaininformationwithorwithouttheuseoftechnology. Contents Foreword Preface Introduction Part1BehindtheScenesChapter1Security'sWeakestLink Part2TheArtoftheAttackerChapter2WhenInnocuousInformationIsn'tChapter3TheDirectAttack:
4、JustAskingforitChapter4BuildingTrustChapter5"LetMeHelpYou"Chapter6"CanYouHelpMe?"Chapter7PhonySitesandDangerousAttachmentsChapter8UsingSympathy,GuiltandIntimidationChapter9TheReverseSting Part3IntruderAlertChapter10EnteringthePremisesChapter11CombiningTechnologyandSocial
5、EngineeringChapter12AttacksontheEntry-LevelEmployeeChapter13CleverConsChapter14IndustrialEspionage Part4RaisingtheBarChapter15InformationSecurityAwarenessandTrainingChapter16RecommendedCorporateInformationSecurityPolicies SecurityataGlance Sources Acknowledgments  F
6、orewordWehumansarebornwithaninnerdrivetoexplorethenatureofoursurroundings.Asyoungmen,bothKevinMitnickandIwereintenselycuriousabouttheworldandeagertoproveourselves.Wewererewardedofteninourattemptstolearnnewthings,solvepuzzles,andwinatgames.Butatthesametime,theworldaroundus
7、taughtusrulesofbehaviorthatconstrainedourinnerurgetowardfreeexploration.Forourboldestscientistsandtechnologicalentrepreneurs,aswellasforpeoplelikeKevinMitnick,followingthisinnerurgeoffersthegreatestthrills,lettingusaccomplishthingsthatothersbelievecannotbedone. KevinMitn
8、ickisoneofthefinestpeopleIknow.Askhim,andhewillsayforthrightlythatwhatheusedtodo-socialengineeri