Jan 9, 2011

Social Engineering: The Art of Human Hacking - Essential Read for any Security Professional


Chris Hadnagy of Social-Engineer.org has done a tremendous job on a ground breaking new SE book.
I must say after reading this book I feel as though the name "Kevin Mitnick" will now be replaced with "Chris Hadnagy" when referring to Social Engineering. I was amazed at how this was not merely a collection of experiences but an in depth, well researched, well organized crash course into the human psyche and the science behind human manipulation. My favorite chapter was number 6: "Influence: The Power of Persuasion" particularly the part on "Framing". This section really drove home the point that humans ARE hackable!
I appreciated how this book is not a "how-to" for would-be malicious hackers or con men. But a guide on the what, how and why techniques behind Social Engineering can be used for malicious purposes. In fact, Chapter 9 is dedicated to "Prevention and Mitigation" of SE attacks
The book is clear, concise and an easy read. This is a must read for anyone in the Information security field, but I think an essential guide for anyone in law enforcement, private security, or even John Q. Public looking to protect himself from being manipulated. Humans will always be the weakest link in security the infrastructure, but this book is a patch for our mental firewall. Highly Recommended.

Available at Amazon
And don't forget to check out Social-Engineer.org