In the context of information security, social engineering is the manipulation of people into performing actions or divulging information for the purpose of gathering, defrauding, or gaining unauthorized system access. While some of the most common forms of social engineering involve telephone or social networks where criminals pose as employees of targeted organizations, phishing accounts for 96% of all successful cyber-attacks. Governments and private organizations have responded through various means such as training employees, executing internal vulnerability assessments, and ad campaigns. Despite all these efforts, phishing continues to provide the primary cyber-attack vector for nefarious entities.

• Chapter 1: The Phish: An Introduction to the Nature of Phishing
• Chapter 2: The User and Context
• Chapter 3: The Technology Comfort Experience
• Chapter 4: Failing to Regulate the Ascriptions of Threats/Vulnerability Knowledge to Technology
• Chapter 5: Assessing the Phishing Risk
• Chapter 6: The Organisation is at Risk: Start Where you Are
• Chapter 7: Training Efficacy Versus Direct Experience and Introspection
• Chapter 8: Addressing Social Media Presence
• Chapter 9: Technology Solutions
• Chapter 10: Some Extras: Case Studies
• Chapter 11: Conclusions