Social Engineering In It Security: Tools, Tactics, And Techn

Sharon Conheady

• 16 september 2014
• 9780071818469

Samenvatting:

Filled with cutting-edge social engineering testing techniques that are legally and ethically sound, this book fully explains how to plan for a social engineering test, perform reconnaissance, implement the test, and accurately report the results.



Publisher's Note: Products purchased from Third Party sellers are not guaranteed by the publisher for quality, authenticity, or access to any online entitlements included with the product.
Cutting-edge social engineering testing techniques"Provides all of the core areas and nearly everything [you] need to know about the fundamentals of the topic."-- Slashdot

Conduct ethical social engineering tests to identify an organization's susceptibility to attack. Written by a global expert on the topic, Social Engineering in IT Security discusses the roots and rise of social engineering and presents a proven methodology for planning a test, performing reconnaissance, developing scenarios, implementing the test, and accurately reporting the results. Specific measures you can take to defend against weaknesses a social engineer may exploit are discussed in detail. This practical guide also addresses the impact of new and emerging technologies on future trends in social engineering.

• Explore the evolution of social engineering, from the classic con artist to the modern social engineer
• Understand the legal and ethical aspects of performing a social engineering test
• Find out why social engineering works from a victim's point of view
• Plan a social engineering test--perform a threat assessment, scope the test, set goals, implement project planning, and define the rules of engagement
• Gather information through research and reconnaissance
• Create a credible social engineering scenario
• Execute both on-site and remote social engineering tests
• Write an effective social engineering report
• Learn about various tools, including software, hardware, and on-site tools
• Defend your organization against social engineering attacks