WILEY The Art of Deception: Controlling the Human Element of Security

Interesting book. Capital 16, and basically the last 100 pages were boring and outdated.

I didn't read fully but it's just amazing. It got me hooked up.

Es un libro consiso, facil de entender y escrito por una de las figuras mas importantes de la seguridad de la informacion. Solo me falta el capitulo final, pero ya queria opinar acerca de este libro. Del primer al penultimo capitulo es completamente entendible, dando definiciones claves para los no familiarizados con el tema de la informatica.

I bought this book in 2008, and read it after I got it. I was in love with cyber-security and social engineering was the theme those days. I never reviewed the book back then but I reread this book again yesterday and it hit me that Kevin's ideas are some of the most profound ideas when it comes to human behavior.Our tendency to be helpful.Our tendency to let someone new come into our livesEtc,..I will be honest, after spending 13 years in financial and marketing industry and reading 1000s of books and having 1000s of experiences I promise if someone wants to set me up they probably can.It's really hard to get away from a good setup.One thing that helped me all these years is that at the end of the day I ask myself two questions. This is a routine I do every day and been doing it for almost 10 years now.1. Did I try to help a stranger or someone I know today? If yes, then what was the context.2. Did someone came in my life trying to do good things for me out of blue? (This can be a friend that randomly texts you on FB or emails you after ages.)

困難な状況に追い込まれたとき、人間は、誰も考えなかったような、とんでもないことを思いつく。本書に書かれている、ソーシャルエンジニアの犯行は、どれも、「よくこんなことを考えつくものだ」「なるほど、こんな手があったのか」と目から鱗が落ちる騙しの技術（Art of Deception）ばかりだ。読み物として、本当に面白い。「1ダースの複雑なミステリーのクライマックスの部分を次から次へと読むようなもの」と評されるのも納得できる。ただ、こうした、人間の負の想像力＆創造力がもっと別の肯定的な方面に発揮できないか、と思うのは評者だけだろうか。