CSCI E-170 Reading

Lecture 13: Social Engineering & Phishing

required reading:

RFCs

• Users' Security Handbook - Guttman et al. - RFC 2504 - (1999)

Other documents

• Crippling a Company By Telephone - Winkler
• How to Protect Insiders from Social Engineering Threats - Microsoft (2006)
• Phishing Attack Trends Report - Q2 2012- Anti-Phishing Working Group
• Why Phishing Works - Dhamija et al - 2006
• Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates - CA/Browser Forum (2012) - sections 4, 7-9
• Command and Control in the Fifth Domain, Command Five Pty Ltd, (2012)

optional reading:

Documents that may be of interest

• Crimes of Persuasion: Schemes, Scams, Frauds - web site
• Anti-Phishing Working Group - web site
• SmartScreen Filter - Microsoft anti-phishing protection - Microsoft web site
• CA/Browser Forum - web site

Books that may be of interest

• The Hacker Crackdown: Law and Disorder on the Electronic Frontier - Sterling (1992)