The Art of Deception by Kevin Mitnick, with William L. Simon, Wiley, 拢19.95/$27.50, ISBN 0471237124 Reviewed by Wendy M. Grossman
IT TOOK Google a split second to find the National Crime Information Center manual on an Ohio law-enforcement site. An it鈥檚 just as Kevin Mitnick says: the manual is full of codes and instructions for retrieving information from the FBI database. Does it matter, since only authorised people have access to the database? Sure it does, if you like to engage in the sport he calls 鈥渟ocial engineering鈥�.
Mitnick, of course, earned notoriety for his hacking exploits. This book doesn鈥檛 talk about his escapades, for which he has served a jail term, but focuses on teaching companies how to defeat someone like him.
Advertisement
Let鈥檚 say I call you, working away at the US Immigration and Naturalization Service, and say something like, 鈥淚鈥檓 trying to do an MW on [deported felon鈥檚 name], and the computer keeps crashing. Can you see if it works for you?鈥� If you knew MW was lingo for modifying a record, wouldn鈥檛 you think I was a fellow worker in trouble, and wouldn鈥檛 you feel inclined to help?
This is Mitnick鈥檚 social engineering, and The Art of Deception is full of specific examples of the ways apparently innocent bits of information can be stitched together to mount a comprehensive attack on an organisation鈥檚 most prized information.