Social Engineering: The Basics
What is social engineering? What are the most common and current tactics? A guide on how to stop social engineering.
By Joan Goodchild, Senior Editor
Here's much more information about social engineering, including lots of examples:
TACTICS
9 dirty tricks: Social engineers' favorite pick-up lines | and 5 more lines
Social engineering techniques: 4 ways criminal outsiders get inside
Social Engineering: 8 Common Tactics
VULNERABILITIES Five Security Holes at the Office
The Clean Desk Test
Sensitive information left lying around the office is an attractive target for anyone who gains unauthorized access to the building.
STORIES
Social engineering stories
Tales from the front lines
Social Engineering: Anatomy of a Hack
The Fine Art of BS, Face to Face
Joan Goodchild tags along to watch a professional con artist in action
Anatomy of a Fraud
An inside look at how a small business got manipulated by a employee who turned out to be a con artist.
A Super Bowl Hack
With confidence, a bluetooth headset and a lot of planning, Zug.com's John Hargrave (allegedly) sneaks into the Super Bowl to pull off a massive prank.
Read more about social engineering in CSOonline's Social Engineering section.
Other stories by Joan Goodchild
Social engineering is the art of tricking security's weakest link (people) into giving up valuable information (like passwords). Learn how social engineers work and how to defend against them.
Social engineering: the basics
Definitions, common forms and tactics, stories and examples of social engineering, and much more
Social engineers' favorite pickup lines
Any email or phone call that starts this way is probably a disguised invitation to trouble
MORE dirty tricks: 5 new social engineering lines
What can a social engineer say to start his deception? Here are 'pickup lines' he loves - because they work
How to rob a bank | How to sneak into a security conference
A social engineer in action (with video)
CSO' ultimate guide to social engineering
A 13-page PDF loaded with examples, defensive ideas, and more [free Insider registration required]
- The CISO's Survival Guide to Securing Data
- Data Privacy and Protection in Production Environments: New Research from Ponemon Institute
- FireEye Advanced Threat Protection KnowledgeVault
- Five Tips to Consider in a Data Security Strategy for Smartphones and Tablets
- Moving Your Email to the Trusted Cloud
- New PCI Tokenization Guidelines with QSA Expert
- Step right up and listen to the security barker
I've gotten some interesting feedback to yesterday's post about the security evangelist title, especially from a guy who gave himself the perfect title in an industry that often feels like a circus. Sean Jackson (@shunkydave on Twitter) sent me the following tweet: "Re: Evangelist, I'm now calling myself the Security Barker to my family and friends." - Is the title 'security evangelist' really that bad?
- Teenage hackers could be our last, best hope
More Salted Hash with Bill Brenner
