// Comparison

Les virus informatiques : théorie, pratique et applications vs Social Engineering: Which Should You Read?

Two cybersecurity books on Foundations, compared honestly: who each is for, what each does best, and which to read first.

Advanced

5/52009

Les virus informatiques : théorie, pratique et applications

Éric Filiol

Éric Filiol's reference French-language treatment of computer virology. Formal theory, infection mechanisms, offensive and defensive applications, with academic rigor rare on the topic.

Intermediate

4/52018

Social Engineering

The Science of Human Hacking

Christopher Hadnagy

Christopher Hadnagy's broad procedural reference on social engineering as a discipline — recon, pretexting, elicitation, microexpressions, and the structured engagement model his consultancy operationalized.

Read this if

French-reading security students, researchers, advanced malware analysts who want a formal treatment — French-language literature on the topic is thin.

Working SE practitioners, awareness-program leads, and people building structured social-engineering engagements who want a single reference for the discipline. Stronger on framework and process than Mitnick; the elicitation and influence chapters draw heavily on Cialdini and Ekman.

Skip this if

Readers looking for a tooling manual or introduction. Filiol writes dense; algorithmic and systems fundamentals are required.

Readers wanting Mitnick-style war stories or modern AI-driven SE tradecraft (deepfake voice clones, LLM-assisted spearphish). Hadnagy's controversial separation from DEF CON in 2022 is also worth being aware of as context for the author rather than the book.

Key takeaways

Prix Roberval 2005 (higher-education category) — one of the few French cyber books awarded at that level.
Filiol is a former military cryptanalyst and ran ESAT then ESIEA's virology lab; academic sourcing is visible chapter by chapter.
The only French-language book that treats computer virology with university-textbook rigor.

SE is a structured engagement, not a stunt; the book operationalizes the kill chain in a way most practitioners can adapt directly.
Microexpression and influence material is borrowed but well-applied; the chapters on elicitation are the book's most cited.
The framework (information gathering → pretext → influence → exit) is the book's lasting contribution and the implicit syllabus for most modern SE training.

How they compare

We rate Les virus informatiques : théorie, pratique et applications higher (5/5 against 4/5 for Social Engineering). For most readers, that means Les virus informatiques : théorie, pratique et applications is the primary pick and Social Engineering is a useful follow-up.

Les virus informatiques : théorie, pratique et applications is pitched at advanced level. Social Engineering is pitched at intermediate level. Read the easier one first if you're not yet comfortable with the topic.

Les virus informatiques : théorie, pratique et applications and Social Engineering both cover Foundations, so reading them in sequence reinforces the same material from different angles.

Keep reading