Social engineering [electronic book] : the science of human hacking / Christopher Hadnagy.
By: Hadnagy, Christopher [author]
.
Material type: 
BookPublisher: Indianapolis, IN : John Wiley Sons & Inc., [2018]Copyright date: ©2018Edition: Second edition.Description: online resource (xxii, 297 pages) : illustrations.Content type: text Media type: computer Carrier type: online resourceISBN: 9781119433385 (paperback); 9781119433736 (e-book); 9781119433750 (e-book).Subject(s): Social engineering | Hackers | Computer security | Human-computer interactionDDC classification: 005.8 Online resources: Access eBook Summary: Examines what social engineering is, the methods used by hackers to gather information, and ways to prevent social engineering threats.
| Item type | Current library | Call number | Status | Notes | |
|---|---|---|---|---|---|
| eBook | MTU Online eBook | 005.8 (Browse shelf(Opens below)) | Available | CIT Module COMP 8063 - Core reading. |
Enhanced descriptions from Syndetics:
Harden the human firewall against the most current threats
Social Engineering: The Science of Human Hacking reveals the craftier side of the hacker's repertoire--why hack into something when you could just ask for access? Undetectable by firewalls and antivirus software, social engineering relies on human fault to gain access to sensitive spaces; in this book, renowned expert Christopher Hadnagy explains the most commonly-used techniques that fool even the most robust security personnel, and shows you how these techniques have been used in the past. The way that we make decisions as humans affects everything from our emotions to our security. Hackers, since the beginning of time, have figured out ways to exploit that decision making process and get you to take an action not in your best interest. This new Second Edition has been updated with the most current methods used by sharing stories, examples, and scientific study behind how those decisions are exploited.
Networks and systems can be hacked, but they can also be protected; when the "system" in question is a human being, there is no software to fall back on, no hardware upgrade, no code that can lock information down indefinitely. Human nature and emotion is the secret weapon of the malicious social engineering, and this book shows you how to recognize, predict, and prevent this type of manipulation by taking you inside the social engineer's bag of tricks.
Examine the most common social engineering tricks used to gain access Discover which popular techniques generally don't work in the real world Examine how our understanding of the science behind emotions and decisions can be used by social engineers Learn how social engineering factors into some of the biggest recent headlines Learn how to use these skills as a professional social engineer and secure your company Adopt effective counter-measures to keep hackers at bayBy working from the social engineer's playbook, you gain the advantage of foresight that can help you protect yourself and others from even their best efforts. Social Engineering gives you the inside information you need to mount an unshakeable defense.
First edition: 2011.
First edition titled "Social engineering: the art of human hacking."
Includes bibliographical references and index.
Examines what social engineering is, the methods used by hackers to gather information, and ways to prevent social engineering threats.
CIT Module COMP 8063 - Core reading.
Electronic reproduction.: ProQuest LibCentral. Mode of access: World Wide Web.
Table of contents provided by Syndetics
- Acknowledgments (p. xi)
- Foreword (p. xix)
- Preface (p. xxi)
- 1 A Look into the New World of Professional Social Engineering (p. 1)
- What Has Changed? (p. 2)
- Why Should You Read This Book? (p. 4)
- An Overview of Social Engineering (p. 6)
- The SE Pyramid (p. 11)
- What's in This Book? (p. 14)
- Summary (p. 15)
- 2 Do You See What I See? (p. 17)
- A Real-World Example of Collecting OSINT (p. 17)
- Nontechnical OSINT (p. 22)
- Tools of the Trade (p. 59)
- Summary (p. 61)
- 3 Profiling People Through Communication (p. 63)
- The Approach (p. 66)
- Enter the DISC (p. 68)
- Summary (p. 80)
- 4 Becoming Anyone You Want to Be (p. 83)
- The Principles of Pretexting (p. 84)
- Summary (p. 98)
- 5 I Know How to Make You Like Me (p. 101)
- The Tribe Mentality (p. 103)
- Building Rapport as a Social Engineer (p. 105)
- The Rapport Machine (p. 120)
- Summary (p. 121)
- 6 Under the Influence (p. 123)
- Principle One: Reciprocity (p. 125)
- Principle Two: Obligation (p. 128)
- Principle Three: Concession (p. 131)
- Principle Four: Scarcity (p. 134)
- Principle Five: Authority (p. 137)
- Principle Six: Consistency and Commitment (p. 142)
- Principle Seven: Liking (p. 146)
- Principle Eight: Social Proof (p. 148)
- Influence vs. Manipulation (p. 151)
- Summary (p. 156)
- 7 Building Your Artwork (p. 157)
- The Dynamic Rules of Framing (p. 159)
- Elicitation (p. 168)
- Summary (p. 182)
- 8 I Can See What You Didn't Say (p. 183)
- Nonverbals Are Essential (p. 184)
- All Your Baselines Belong to Us (p. 187)
- Understand the Basics of Nonverbals (p. 196)
- Comfort vs. Discomfort (p. 198)
- Summary (p. 220)
- 9 Hacking the Humans (p. 223)
- An Equal Opportunity Victimizer (p. 224)
- The Principles of the Pentest (p. 225)
- Phishing (p. 229)
- Vishing (p. 233)
- SMiShing (p. 240)
- Impersonation (p. 241)
- Reporting (p. 246)
- Top Questions for the SE Pentester (p. 250)
- Summary (p. 254)
- 10 Do You Have a M.A.P.P.? (p. 257)
- Step 1: Learn to Identify Social Engineering Attacks (p. 259)
- Step 2: Develop Actionable and Realistic Policies (p. 261)
- Step 3: Perform Regular Real-World Checkups (p. 264)
- Step 4: Implement Applicable Security-Awareness Programs (p. 266)
- Tie It All Together (p. 267)
- Gotta Keep 'Em Updated (p. 268)
- Let the Mistakes of Your Peers Be Your Teacher (p. 270)
- Create a Security Awareness Culture (p. 271)
- Summary (p. 274)
- 11 Now What? (p. 277)
- Soft Skills for Becoming an Social Engineer (p. 277)
- Technical Skills (p. 280)
- Education (p. 281)
- Job Prospects (p. 283)
- The Future of Social Engineering (p. 284)
- Index (p. 287)