《The Art of Deception: Controlling the Human Element of Security》是由凱文·米特尼克（Kevin D. Mitnick）與威廉·L·西蒙（William L. Simon）合著的社會工程學著作，2003年10月1日通過John Wiley & Sons出版社首次出版，國際標準書號為978-0-7645-4280-0，全書共368頁。作者凱文·米特尼克曾因入侵美國政府機構及企業系統成為傳奇黑客，後轉型為安全專家。
該書通過真實案例分析社會工程學攻擊手段，揭示人類行為對信息安全的影響，指出人性是安全系統的薄弱環節。全書共分17個章節，包含社會工程學技術原理，第八章《利用同情、內疚和脅迫》和第九章《逆向騙局》具體闡釋攻擊手法與防禦措施。中文版於2014年由清華大學出版社發行。
基本介紹
- 作者：Kevin D. Mitnick
- 出版時間：2003年10月17日
- 出版社：Wiley
- 頁數：231 頁
- ISBN：9780764542800
- 裝幀：Paperback
內容簡介
The world's most infamous hacker offers an insider's view of the low-tech threats to high-tech security Kevin Mitnick's exploits as a cyber-desperado and fugitive form one of the most exhaustive FBI manhunts in history and have spawned dozens of articles, books, films, and documentaries. Since his release from federal prison, in 1998, Mitnick has turned his life around and esta...(展開全部) The world's most infamous hacker offers an insider's view of the low-tech threats to high-tech security Kevin Mitnick's exploits as a cyber-desperado and fugitive form one of the most exhaustive FBI manhunts in history and have spawned dozens of articles, books, films, and documentaries. Since his release from federal prison, in 1998, Mitnick has turned his life around and established himself as one of the most sought-after computer security experts worldwide. Now, in The Art of Deception, the world's most notorious hacker gives new meaning to the old adage, "It takes a thief to catch a thief." Focusing on the human factors involved with information security, Mitnick explains why all the firewalls and encryption protocols in the world will never be enough to stop a savvy grifter intent on rifling a corporate database or an irate employee determined to crash a system. With the help of many fascinating true stories of successful attacks on business and government, he illustrates just how susceptible even the most locked-down information systems are to a slick con artist impersonating an IRS agent. Narrating from the points of view of both the attacker and the victims, he explains why each attack was so successful and how it could have been prevented in an engaging and highly readable style reminiscent of a true-crime novel. And, perhaps most importantly, Mitnick offers advice for preventing these types of social engineering hacks through security protocols, training programs, and manuals that address the human element of security. Kevin Mitnick is the founder of
