Have you ever noticed how fundamental deception is to the human condition? Deception and forms of social engineering have been with us since the beginning of recorded history. And yet, it seems like we are just as vulnerable to it as ever. But now the stakes are higher because technology allows social engineers to deceive at scale.
This episode explores the psychology of deception, provides a foundation for understanding social engineering, offers a few mental models for exploration and exploitation, and discusses how we can prepare our mental defenses.
Guests:
-
Rachael Tobac: (LinkedIn), CEO of SocialProof Security
-
Chris Hadnagy: (LinkedIn); CEO of Social Engineer, LLC; Founder of Innocent Lives Foundation; Founder of Social-Engineer.org
-
Lisa Forte: (LinkedIn); Partner at Red Goat Cyber Security; Co-Founder Cyber Volunteers 19
-
George Finney: (LinkedIn); Chief Security Officer at Southern Methodist University; Founder of Well Aware Security
Notes & Resources:
- CSO Online article on Social Engineering
- OODA Loop
- Understanding Framing Effects
- More examples of Framing Effects
- Harvard Business Review article on the Principles of Persuasion
- A blog series I did on Deception (Part 1), (Part 2).
- PsychologyToday article on Social Engineering
Recommended Books (Amazon affiliate links):
-
The Art of Deception: Controlling the Human Element of Security by Kevin Mitnick
-
Ghost in the Wires: My Adventures as the World's Most Wanted Hacker by Kevin Mitnick
-
Human Hacking: Win Friends, Influence People, and Leave Them Better Off for Having Met You by Chris Hadnagy
-
Influence, New and Expanded: The Psychology of Persuasion by Robert Cialdini
-
Pre-Suasion: A Revolutionary Way to Influence and Persuade by Robert Cialdini
-
Practical Social Engineering: A Primer for the Ethical Hacker by Joe Gray
-
Social Engineering: The Science of Human Hacking by Chris Hadnagy
-
Thinking, Fast and Slow by Daniel Kahneman.
-
Transformational Security Awareness: What Neuroscientists, Storytellers, and Marketers Can Teach Us About Driving Secure Behaviors by Perry Carpenter
-
Well Aware: Master the Nine Cybersecurity Habits to Protect Your Future by George Finney
Music and Sound Effects by Blue Dot Sessions & Storyblocks.
Artwork by Chris Machowski.