Hacker Psychology - Principles of Social Engineering

All information security problems can be attributed to people. However, in the past few decades, the research focus of the global information security community has almost always been on "how to fight hackers technically", ignoring the most basic fact that "hackers are human beings". To be more precise, people, networks and the environment form a closed-loop system. Only by ensuring the safety of all links can we talk about true security. Security measures applicable to networks and environments cannot be copied and applied to human security; and the most effective way to guide people's thinking and behavior is to use methods developed in psychology. This book systematically introduces "hacker psychology" (also known as "information security psychology"), comprehensively summarizes and organizes the results obtained by domestic and foreign psychology circles in the past three hundred years, which can be used to understand and combat hackers. It also establishes a relatively complete "social engineering attack case library". This book can be used as a popular science reading for the general public. Ordinary readers can learn how to deal with hackers' social engineering attack methods. Security experts can also use it to fill the gap of information security psychology in the information security assurance system and lay a solid foundation for future offensive and defensive confrontations.