Elementary Secondary Higher Ed Common Reads
0 0
Download high-resolution image

The Weakest Link

How to Diagnose, Detect, and Defend Users from Phishing

Author Arun Vishwanath
Ebook
The MIT Press
On sale Aug 16, 2022 | 272 Pages | 9780262371971
Add to cart Add to list Exam Copies

See Additional Formats
An expert in cybersecurity lays out an evidence-based approach for assessing user cyber risk and achieving organizational cyber resilience.

Phishing is the single biggest threat to cybersecurity, persuading even experienced users to click on hyperlinks and attachments in emails that conceal malware. Phishing has been responsible for every major cyber breach, from the infamous Sony hack in 2014 to the 2017 hack of the Democratic National Committee and the more recent Colonial Pipleline breach. The cybersecurity community’s response has been intensive user training (often followed by user blaming), which has proven completely ineffective: the hacks keep coming. In The Weakest Link, cybersecurity expert Arun Vishwanath offers a new, evidence-based approach for detecting and defending against phishing—an approach that doesn’t rely on continual training and retraining but provides a way to diagnose user vulnerability.
 
Vishwanath explains how organizations can build a culture of cyber safety. He presents a Cyber Risk Survey (CRS) to help managers understand which users are at risk and why. Underlying CRS is the Suspicion, Cognition, Automaticity Model (SCAM), which specifies the user thoughts and actions that lead to either deception by or detection of phishing come-ons. He describes in detail how to implement these frameworks, discussing relevant insights from cognitive and behavioral science, and then presents case studies of organizations that have successfully deployed the CRS to achieve cyber resilience. These range from a growing wealth management company with twenty regional offices to a small Pennsylvania nonprofit with forty-five employees.
 
The Weakest Link will revolutionize the way managers approach cyber security, replacing the current one-size-fits-all methodology with a strategy that targets specific user vulnerabilities.
Acknowledgments vii
Introduction 1
1 How Social Engineering Evolved 23
2 What Makes Social Engineering Possible 41
3 How CISOs Are Dealing with Social Engineering 65
4 Why Do People Fall for Social Engineering? 89
5 The Key Symptom 117
6 Performing an Accurate Diagnosis 135
7 Conducting a User Cyber Risk Assessment 159
8 From Cyber Risk to Cyber Hygiene 179
9 A Tale of Five Implementations 203
10 Reversing the Social Engineer's Advantages 225
Notes 247
Arun Vishwanath, a leading expert in cybersecurity, has held faculty positions at the University at Buffalo, Indiana University, and the Berkman Klein Center for Internet & Society at Harvard University. He has written on human cyber vulnerability and related topics for CNN, the Washington Post, and other major media. 
Arun Vishwanath View titles by Arun Vishwanath

About

An expert in cybersecurity lays out an evidence-based approach for assessing user cyber risk and achieving organizational cyber resilience.

Phishing is the single biggest threat to cybersecurity, persuading even experienced users to click on hyperlinks and attachments in emails that conceal malware. Phishing has been responsible for every major cyber breach, from the infamous Sony hack in 2014 to the 2017 hack of the Democratic National Committee and the more recent Colonial Pipleline breach. The cybersecurity community’s response has been intensive user training (often followed by user blaming), which has proven completely ineffective: the hacks keep coming. In The Weakest Link, cybersecurity expert Arun Vishwanath offers a new, evidence-based approach for detecting and defending against phishing—an approach that doesn’t rely on continual training and retraining but provides a way to diagnose user vulnerability.
 
Vishwanath explains how organizations can build a culture of cyber safety. He presents a Cyber Risk Survey (CRS) to help managers understand which users are at risk and why. Underlying CRS is the Suspicion, Cognition, Automaticity Model (SCAM), which specifies the user thoughts and actions that lead to either deception by or detection of phishing come-ons. He describes in detail how to implement these frameworks, discussing relevant insights from cognitive and behavioral science, and then presents case studies of organizations that have successfully deployed the CRS to achieve cyber resilience. These range from a growing wealth management company with twenty regional offices to a small Pennsylvania nonprofit with forty-five employees.
 
The Weakest Link will revolutionize the way managers approach cyber security, replacing the current one-size-fits-all methodology with a strategy that targets specific user vulnerabilities.

Table of Contents

Acknowledgments vii
Introduction 1
1 How Social Engineering Evolved 23
2 What Makes Social Engineering Possible 41
3 How CISOs Are Dealing with Social Engineering 65
4 Why Do People Fall for Social Engineering? 89
5 The Key Symptom 117
6 Performing an Accurate Diagnosis 135
7 Conducting a User Cyber Risk Assessment 159
8 From Cyber Risk to Cyber Hygiene 179
9 A Tale of Five Implementations 203
10 Reversing the Social Engineer's Advantages 225
Notes 247

Author

Arun Vishwanath, a leading expert in cybersecurity, has held faculty positions at the University at Buffalo, Indiana University, and the Berkman Klein Center for Internet & Society at Harvard University. He has written on human cyber vulnerability and related topics for CNN, the Washington Post, and other major media. 
Arun Vishwanath View titles by Arun Vishwanath

Additional formats

Subscribe

Penguin Random House Higher Education

© 2025 Penguin Random House

Back to Top
0
    • 0
    Wish List (0)