Social Engineering: The Science of Human Hacking, 2/e (Paperback)

Harden the human firewall against the most current threats

Social Engineering: The Science of Human Hacking reveals the craftier side of the hacker’s repertoire—why hack into something when you could just ask for access? Undetectable by firewalls and antivirus software, social engineering relies on human fault to gain access to sensitive spaces; in this book, renowned expert Christopher Hadnagy explains the most commonly-used techniques that fool even the most robust security personnel, and shows you how these techniques have been used in the past. The way that we make decisions as humans affects everything from our emotions to our security. Hackers, since the beginning of time, have figured out ways to exploit that decision making process and get you to take an action not in your best interest. This new Second Edition has been updated with the most current methods used by sharing stories, examples, and scientific study behind how those decisions are exploited.

Networks and systems can be hacked, but they can also be protected; when the “system” in question is a human being, there is no software to fall back on, no hardware upgrade, no code that can lock information down indefinitely. Human nature and emotion is the secret weapon of the malicious social engineering, and this book shows you how to recognize, predict, and prevent this type of manipulation by taking you inside the social engineer’s bag of tricks.

• Examine the most common social engineering tricks used to gain access
• Discover which popular techniques generally don’t work in the real world
• Examine how our understanding of the science behind emotions and decisions can be used by social engineers
• Learn how social engineering factors into some of the biggest recent headlines
• Learn how to use these skills as a professional social engineer and secure your company

• Adopt effective counter-measures to keep hackers at bay

By working from the social engineer’s playbook, you gain the advantage of foresight that can help you protect yourself and others from even their best efforts. Social Engineering gives you the inside information you need to mount an unshakeable defense.

加強人類防火牆以對抗最新的威脅

《社交工程：人類駭客的科學》揭示了駭客更狡猾的一面——為什麼要入侵系統，當你可以直接要求存取權限呢？社交工程利用人類的錯誤來獲取對敏感空間的存取權，這些技巧無法被防火牆和防毒軟體偵測到。在這本書中，知名專家Christopher Hadnagy解釋了最常用的欺騙技巧，即使是最堅固的安全人員也會上當，並展示了這些技巧過去是如何被使用的。我們作為人類做決策的方式影響著我們的情緒和安全。駭客們從一開始就找到了利用這個決策過程的方法，讓你採取不符合自身最佳利益的行動。這本新的第二版通過分享故事、例子和科學研究，更新了最新的方法，解釋了這些決策是如何被利用的。

網絡和系統可以被駭，但也可以被保護；當涉及的“系統”是一個人時，就沒有軟體可以依靠，沒有硬體升級，也沒有可以永久鎖定信息的程式碼。人類的本性和情感是惡意社交工程的秘密武器，這本書向你展示了如何識別、預測和防止這種操縱，並帶你深入了解社交工程師的技巧。

- 檢視最常用的社交工程技巧以獲取存取權限
- 發現在現實世界中通常不起作用的流行技巧
- 探討我們對情感和決策科學的理解如何被社交工程師利用
- 了解社交工程如何影響最近的重大新聞事件
- 學習如何作為專業社交工程師使用這些技能並保護您的公司

通過採用有效的對策來防止駭客入侵

通過遵循社交工程師的策略，您可以提前預見，從而幫助自己和他人抵禦他們最好的努力。《社交工程》為您提供了內部信息，幫助您建立堅不可摧的防禦。