Social Engineering: Defending Against Technology-Based Deception

Author(s): Gareth Doherty

The main goal of technology-based social engineering is to obtain confidential information from individuals within an organization for the purpose of gaining access to the enterprise's network. Attackers either deceive individuals into divulging access information or they obtain information left on discarded company documents and/or storage devices (hard drives, storage media, etc.). This note provides an overview of the most common types of technology-based deception and recommends a series of protections to mitigate those threats.

Tags

security, audit, e-mail, help desk, spam, IT security, phishing, Security Policy, data classification, Security Management, trojan, hacker, network security, Social engineering, social, trust, hacking, security training, Engineering, security awareness, manipulation, human firewall, dumpster diving, deception, social engineering cycle, security education, security audit, forensic analysis, mail-out
© Info-Tech Research Group | Terms of Use | Privacy Policy