| ||||||||||||||||||
Product Details
|
After Mitnick's first dozen examples anyone responsible for organisational security is going to lose the will to live. It's been said before but people and security are antithetical. Organisations exist to provide a good or service and want helpful friendly employees to promote the good or service. People are social animals who want to be liked. Controlling the human aspects of security means denying someone something. This circle can't be squared.
Considering Mitnick's reputation as a hacker guru the least and last point of attack for hackers using social engineering are computers. Most of the scenarios in The Art of Deception work just as well against computer-free organisations and were probably known to the Pheonicians. Technology simply makes it all easier. Phones are faster than letters after all and large organisations mean dealing with lots of strangers.
Much of Mitnick's security advice sounds practical until you think about implementation, when you realise more effective security means reducing organisational efficiency: an impossible trade in competitive business. And anyway, who wants to work in an organisation where the rule is "Trust no one"? Mitnick shows how easily security is breached by trust, but without trust people can't live and work together. In the real world effective organisations have to acknowledge total security is a chimera--and carry more insurance. --Steve Patient --This text refers to the Hardcover edition.
Suggested Tags from Similar Products(What's this?)Be the first one to add a relevant tag (keyword that's strongly related to this product)
|
|
Share your thoughts with other customers:
|
||||||||||||||||||||||
|
Most helpful customer reviews
2 of 2 people found the following review helpful:
5.0 out of 5 stars
Packed With Knowledge!,
By
This review is from: The Art of Deception: Controlling the Human Element of Security (Hardcover)
In The Art of Deception, Kevin D. Mitnick, a corporate security consultant who was once arrested for computer hacking, has written a fascinating book about how to control security lapses due to the "human element." With writer William L. Simon, he describes how con artists use social engineering to gain information by lying to pass themselves off as insiders. By being sensitive to human behavior and taking advantage of trust, they learn to bypass your security systems. The book teaches you how to ward off such threats and educate employees. Yet, problematically, this information could also help con artists be more sophisticated. In any case, this highly informative, engaging book includes sample conversations that open the door to information, along with tips about how various cons are used and what to do about them. We recommend this book to corporate officers, information managers, human resource getAbstract. directors and security personnel, but don't tell anybody.
4.0 out of 5 stars
Great Book for anyone intrrested ins ecurity or people,
This review is from: The Art of Deception: Controlling the Human Element of Security (Paperback)
This is a great book, ti is filled with great stories, preventitive mesures, and more. This is a very easy read, and will be well worth the price fro anyone intrested in security, computer security, corprit security, or how people think, and how socity is flawed. If you are not in a buisness, or a company where this is usefull, then you might get boared with the ammount of talk on hwo to implement security into a company, but even still, it is a great book
3.0 out of 5 stars
A good eye-opener for business people,
By "steader" (Ridgefield, CT USA) - See all my reviews
This review is from: The Art of Deception: Controlling the Human Element of Security (Hardcover)
I'm a business person turned technical and have mixed opinions about this book. I would recommend it to people who have no awareness of how social engineering can compromise computer security above any physical security countermeasures. It is repetitive in its warnings and examples, but one's reaction to that repetitiveness (boredom, apathy) only serves to illustrate how one can easily become a target of deception. One must analyze all social interactions within any high-security context to decrease security risk. This book emphasizes that a situation can actually be high-security without the average business person knowing it.
Share your thoughts with other customers: Create your own review
Want to see more reviews on this item?
|
Most recent customer reviews |
|
|
|