Social Engineering - The Real E-Terrorism?

Home
>
Internet Security
>
Social Engineering - The Real E-Terrorism?

Social Engineering - The Real E-Terrorism?

One evening, during the graveyard shift, an AOL technical support operator took a call from a hacker. During the hour long conversation the hacker mentioned he had a car for sale. The technical support operator expressed an interest so the hacker sent him an e-mail with a photo of the car attached. When the operator opened the attachment it created a back door that opened a connection out of AOL's network, through the firewall, allowing the hacker full access to the entire internal network of AOL with very little effort on the hacker's part.

The above is a true story and it is an excellent example of one of the biggest threats to an organisation's security - social engineering. It has been described as people hacking and it generally means persuading someone inside a company to volunteer information or assistance.

Examples of techniques employed by hackers include:

Unobtrusively observing over your shoulder as you key in your password or PIN.
Calling helpdesks with questions or being overly friendly
Pretending to be someone in authority.

Social engineering attacks can have devastating consequences for the businesses involved. Accounts can be lost, sensitive information can be compromised, competitive advantage can be wiped out and reputation can be destroyed.

By implementing some simple techniques you can reduce the risk of your organisation becoming a victim or, in the event that you are targeted, keep the consequences to a minimum.

Make sure that all staff, especially non-IT staff, are aware of the risk of social engineering and what to do in the event of such an attack.
Conduct regular security awareness training so that all staff are kept up to date with security related issues.
Implement a formal incident reporting mechanism for all security related incidents to ensure there is a rapid response to any breaches.
Ensure that the company has security policies and procedures in place, that all staff are aware of them and that they are followed.
Put an information classification system in place to protect sensitive information.

Conduct regular audits, not only on IT systems but also on policies, procedures and personnel so that any potential weaknesses can be addressed as soon as possible.

About The Author

Rhona Aylward has extensive experience in the area of Quality Management and more recently in Information Security Management. She is a qualified Lead Auditor for BS7799 and CEO for Alpha Squared Solutions Ltd.

www.a2solutions.co.uk, raylward@a2solutions.co.uk

In The News:

Three British men being held in Taliban custody
Sat, 01 Apr 2023 17:48:00 +0100
Three British men are being held in Taliban custody in Afghanistan - including so-called "danger tourist" Miles Routledge who returned to the country after being evacuated by British armed forces less than two years ago.

Yoghurt thrown over women in Iran for not covering their hair
Sat, 01 Apr 2023 16:34:00 +0100
Two women in Iran who went into a store while not fully covering their hair had yoghurt thrown over them by a man, in an incident captured on video.

Women to be prosecuted 'without mercy' for not wearing veils, says Iran
Sat, 01 Apr 2023 11:45:00 +0100
Women will be prosecuted "without mercy" if they are seen in public without a veil, Iran's judiciary chief has warned.

Pope jokes as he leaves hospital after three-day stay
Sat, 01 Apr 2023 09:37:00 +0100
Pope Francis joked "I'm still alive" as he left hospital following treatment for a respiratory infection.

12 killed in crush during free food handout
Sat, 01 Apr 2023 13:18:00 +0100
Twelve people have died in a crush in Pakistan while attempting to collect free food during Ramadan.

tikatoshop.it

Erfahrungen mit Pallhuber Wein
Agen Bola SBOBET Terpercaya

Travel in comfort and at your leisure with CT Airlink Limousine & Car Service for top quality private transportation and exceptional customer service. We operate Sedans, SUVs & Vans for CT Car Services to covering all Connecticut airports including Car Service from CT to Newark Airport , Mohegan Casino Uncasville CT, Foxwoods Casino Mashantucket CT, Manhattan Cruise Terminal NYC, Brooklyn Cruise Terminal NYC and Bayonne Cruise Terminal NJ. CT Airlink hire licensed and friendly chauffeurs who have in-depth knowledge of the Areas.