// Comparison

Kingpin vs The Art of Intrusion: Which Should You Read?

Two cybersecurity books on Narrative, compared honestly: who each is for, what each does best, and which to read first.

Beginner

5/52011

How One Hacker Took Over the Billion-Dollar Cybercrime Underground

Kevin Poulsen

Kevin Poulsen's reconstruction of Max Butler's career — from white-hat consultant to running CardersMarket, the carding forum that consolidated the early-2000s underground — and the FBI investigation that finally took him down.

Beginner

4/52005

The Art of Intrusion

The Real Stories Behind the Exploits of Hackers, Intruders and Deceivers

Kevin Mitnick, William L. Simon

Mitnick and Simon's follow-up to The Art of Deception: third-party stories from working hackers — casino slot exploits, prison-network breaches, post-9/11 intelligence ops — reconstructed and annotated by Mitnick.

Read this if

Anyone interested in cybercrime as an economy rather than as a series of incidents. Poulsen, himself a former hacker turned journalist, has both the access and the technical fluency to make the carding-economy mechanics legible.

Readers who liked The Art of Deception and want more case-study breadth, especially around physical-security pivots and improvised tradecraft. Underrated as a source of pretext patterns for awareness training: the casino chapter alone is worth the price.

Skip this if

Readers wanting current ransomware-economy detail; the book is 2011 and pre-dates the modern affiliate / RaaS structure. The mechanics generalize, the actors don't.

Anyone needing current technique. The book is 2005 — Windows XP era — and the technology is incidental to the human stories anyway. Skim if you want; the value lives in the patterns, not the payloads.

Key takeaways

Cybercrime markets are markets — they have liquidity, reputation, dispute resolution, and trust topology, and they fail in market-like ways.
Most underground takedowns are won by HUMINT and OSINT inside the forums, not by exploitation; Butler's downfall was social.
The book's pacing makes the carding economy legible without flattening the moral complexity of its inhabitants.

Most successful intrusions are not single-vector — they are patient compositions of small advantages, and the book's structure makes that visible.
The 'we got bored and tried it' chapters illustrate why curiosity is operationally distinct from skill, and why both matter.
Insider stories like the prison and casino chapters are the closest most readers will get to seeing how a long-running campaign actually feels from the inside.

How they compare

We rate Kingpin higher (5/5 against 4/5 for The Art of Intrusion). For most readers, that means Kingpin is the primary pick and The Art of Intrusion is a useful follow-up.

Both books target beginner-level readers, so the choice is about topic, not difficulty.

Kingpin and The Art of Intrusion both cover Narrative, History, so reading them in sequence reinforces the same material from different angles.

Keep reading

Kingpin

→ Alternatives to Kingpin → What to read after Kingpin