Social Engineering in IT Security: Tools, Tactics, and Techniques
暫譯: 資訊安全中的社會工程學:工具、戰術與技術
Conheady, Sharon
- 出版商: McGraw-Hill Education
- 出版日期: 2014-08-04
- 售價: $1,890
- 貴賓價: 9.5 折 $1,796
- 語言: 英文
- 頁數: 254
- 裝訂: Quality Paper - also called trade paper
- ISBN: 0071818464
- ISBN-13: 9780071818469
-
相關分類:
資訊安全
海外代購書籍(需單獨結帳)
相關主題
商品描述
Publisher's Note: Products purchased from Third Party sellers are not guaranteed by the publisher for quality, authenticity, or access to any online entitlements included with the product.
Cutting-edge social engineering testing techniques"Provides all of the core areas and nearly everything you] need to know about the fundamentals of the topic."--SlashdotConduct ethical social engineering tests to identify an organization's susceptibility to attack. Written by a global expert on the topic, Social Engineering in IT Security discusses the roots and rise of social engineering and presents a proven methodology for planning a test, performing reconnaissance, developing scenarios, implementing the test, and accurately reporting the results. Specific measures you can take to defend against weaknesses a social engineer may exploit are discussed in detail. This practical guide also addresses the impact of new and emerging technologies on future trends in social engineering.
Cutting-edge social engineering testing techniques"Provides all of the core areas and nearly everything you] need to know about the fundamentals of the topic."--SlashdotConduct ethical social engineering tests to identify an organization's susceptibility to attack. Written by a global expert on the topic, Social Engineering in IT Security discusses the roots and rise of social engineering and presents a proven methodology for planning a test, performing reconnaissance, developing scenarios, implementing the test, and accurately reporting the results. Specific measures you can take to defend against weaknesses a social engineer may exploit are discussed in detail. This practical guide also addresses the impact of new and emerging technologies on future trends in social engineering.
- Explore the evolution of social engineering, from the classic con artist to the modern social engineer
- Understand the legal and ethical aspects of performing a social engineering test
- Find out why social engineering works from a victim's point of view
- Plan a social engineering test--perform a threat assessment, scope the test, set goals, implement project planning, and define the rules of engagement
- Gather information through research and reconnaissance
- Create a credible social engineering scenario
- Execute both on-site and remote social engineering tests
- Write an effective social engineering report
- Learn about various tools, including software, hardware, and on-site tools
- Defend your organization against social engineering attacks
商品描述(中文翻譯)
出版社聲明:從第三方賣家購買的產品,出版社不保證其質量、真實性或對產品中包含的任何在線權益的訪問。
尖端的社會工程測試技術「提供了有關該主題基本原理的所有核心領域和幾乎所有您需要知道的內容。」--Slashdot
- 探索社會工程的演變,從經典的騙子到現代的社會工程師
- 了解執行社會工程測試的法律和道德方面
- 從受害者的角度了解為什麼社會工程有效
- 計劃社會工程測試--進行威脅評估、確定測試範圍、設定目標、實施項目規劃並定義參與規則
- 通過研究和偵查收集信息
- 創建一個可信的社會工程場景
- 執行現場和遠程的社會工程測試
- 撰寫有效的社會工程報告
- 了解各種工具,包括軟體、硬體和現場工具
- 保護您的組織免受社會工程攻擊
作者簡介
Sharon Conheady is a director at First Defence Information Security in the UK where she specializes in social engineering. She has presented on the topic at security conferences worldwide and regularly leads training seminars on how to perform ethical social engineering tests and defend against social engineers.
作者簡介(中文翻譯)
Sharon Conheady 是英國 First Defence Information Security 的一名主管,專門研究社會工程學。她在全球的安全會議上就此主題進行過演講,並定期主持有關如何進行道德社會工程測試及防範社會工程師的培訓研討會。