you judge
- "The ART OF MANIPULATION"
- It preys on qualities of human nature, such as the desire to be helpful, the tendency to trust people and the fearof getting in trouble.
- social engineering is a powerful tool because it can not be defended against by software or hardware and since people are usually the weakest link in the security chain it is even more difficult to fix.
ok heres what i put up
What is Social engineering.
SE is the Human side of breaking into a network or machine.
AKA
"The ART OF MANIPULATION"
Social engineering is the acquisition of sensitive information or inappropriate access privilages by an outsider, based upon building of inappropriate trust relationships with outsiders.
The goal of a social engineer is to trick someone into providing valuable information or access to that information.
It preys on qualities of human nature, such as the desire to be helpful, the tendency to trust people and the fear of getting in trouble.
It can also be defined as the human side of breaking into a network. people with authentication processe, firewalls, virtual private networks and network monitoring software are still wide open to attacks.
if this is intended for a company it can be used in a way that an employee may unwittingly give away key information in an email or by answering questions over the phone with someone they don't know or even by talking about a project with co-workers at a local bar after hours.
social engineering is a powerful tool because it can not be defended against by software or hardware and since people are usually the weakest link in the security chain it is even more difficult to fix.
I want to go more in depth on this subject. I would also like to discuss the differant kinds of SE but i won't have enough room to put it in one article so i will most likely post three or for articles each one covering a differant aspects
i know its short. i just won't have enough room to cover everything at once so i am breaking it down into sectrions. this is just for people who don't know what SE really is. in later articles i will discuss things like
impersonation, third-person approach, tech support fraud, shoulder surfing, dumpster diving, spam, mail attachments, sweepstakes/pop-ups. i will even cover Reverse SE and using it to your advantage.