The Art of Deception: Controlling the Human Element of Security

By Kevin D. Mitnick, W. L. Simon. 2001

966 citations recorded by the source corpus.

View Paper: https://www.semanticscholar.org/paper/26ebc279dbbbfabab68b613e557ebcb751dd81f7

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

Citations in the corpus

The Psychology and Sociology of Fraud: Integrating the Behavioral Sciences Component Into Fraud and Forensic Accounting Curricula (2008, background): “…or property rights’’ (Shover 1998).12 Two ways in which we can use behavioral science to understand the modus operandi of trust violators are now briefly described: the science of persuasion (Cialdini 2001, 2007; Hogan and Speakman 2006) and social engineering (Hinson 2008; Mitnick and Simon 2002).”
Fingerprint-Based Fuzzy Vault: Implementation and Performance (2007, background): “However, passwords can be easily lost, stolen, forgotten, or guessed using social engineering [3] and dictionary attacks.”
From information security to cyber security (2013, background): “Firstly, it should be clear that information security is not a product or a technology, but a process (Mitnick and Simon, 2002, p. 4).”
A comparison of perceived and real shoulder-surfing risks between alphanumeric and graphical passwords (2006, background): “In most instances password attacks take the form of harvesting as a form of social engineering [22].”
Information revelation and privacy in online social networks (2005, background): “Social engineering is a well-known practice in computer security to obtain confidential information by manipulating legitimate users [22].”
Security awareness of computer users: A phishing threat avoidance perspective (2014, background): “Where it is impossible to entirely eliminate the end-user from the system, for example inhome use, the best possible approach for computer security is to educate the end-user in security prevention (Arachchilage & Love, 2013; Mitnick & Simon, 2002; Schneier, 2000).”
Graphical passwords: Learning from the first twelve years (2012, background): “While such methods may require targeted background work (or knowledge of personal details in personalized attacks), this is often easier than otherwise breaking into a system [Mitnick and Simon 2002].”
The Plight of the Targeted Attacker in a World of Scale (2010, background): “Almost all of the exploits described by Mitnick [27] involve dedicated eﬀort and are non-scalable.”