The Art of Deception
Controlling The Human Element of Security
Chapter One
When Innocuous
Information Isn't
What do most people think is the real threat from social engineers?
What should you do to be on your guard?
If the goal is to capture some highly valuable prize-say, a vital component
of the company's intellectual capital-then perhaps what's needed is,
figuratively, just a stronger vault and more heavily armed guards. Right?
But in reality penetrating a company's security often starts with the bad
guy obtaining some piece of information or some document that seems so
innocent, so everyday and unimportant, that most people in the organization
wouldn't see any reason why the item should be protected and
restricted.
THE HIDDEN VALUE OF INFORMATION
Much of the seemingly innocuous information in a company's possession
is prized by a social engineering attacker because it can play a vital role in
his effort to dress himself in a ... read full excerpt from The Art of Deception: Controlling the Human Element of Security ebook
