Introduction to Social engineering | Techniques of Social engineering
Download as PPTX, PDF2 likes490 views
Social engineering is a manipulation technique that targets individuals in order to exploit weaknesses in security systems for malicious purposes. Common methods include pretexting, phishing, and vishing, which involve tricking individuals into divulging sensitive information. To enhance security, it is vital to verify information sources and ensure safe online practices.
Introduction to Social engineering | Techniques of Social engineering
- 1. Social Engineering BY PREM LAMSAL BSC.CSIT 7TH SEMESTER 31
- 2. What is Social Engineering? • In a security context, Social Engineering can be defined as: • A combination of social, psychological and information gathering techniques that are used to manipulate people for nefarious purposes. • It target humans rather then technology to exploit weakness in an organizations security.
- 3. • Is the art of manipulating people so they give up confidential information • Attacker uses human interaction to obtain or compromises information • Tricking people to get information • Most common type of SE happens over the phone Social Engineering
- 4. Kevin Mitnick - Famous Social Engineer “People are generally helpful, especially to someone who is nice, knowledgeable or insister.”
- 5. Social Engineering Cycle Gather Information Plan Attack Acquire toolsAttack Use acquired knowledge
- 6. Techniques of Social Engineering • Pretexting • Phishing • Vishing • Baiting • Quid pro quo • Diversion Theft
- 7. Pretexting • Creating fake or invented scenario
- 8. Phishing • Obtaining information through email, websites • Websites like http://shadowave.co Sending fake mail to victim
- 9. Spear Phishing • More specific to the victim • Target individual Vishing • Phone Phishing
- 10. Baiting • Using Trojan Horse that uses physical media and relies on the greed of the victim Web Click Baiting • Something on Internet makes you to click
- 11. Quid pro quo • Something for something • Call random numbers at a company, claiming to be from technical support. • Eventually, you will reach someone with a legitimate problem • Grateful you called them back, they will follow your instructions • The attacker will "help" the user, but will really have the victim type commands that will allow the attacker to install malware
- 12. Diversion Theft • Divert actual delivery location to some other place and theft information.
- 13. Weakest Link? • No matter how strong your: 1. Firewalls 2. Intrusion Detection System 3. Cryptography 4. Antivirus software • We are the weakest link in computer security ! • People are more vulnerable than computers
- 14. General Safety / Prevention • Before transmitting personal information over the internet, check the connection is secure and check the URL is correct • If unsure email message is legitimate, contact the person or company by another means to verify • Be aware of excited content on the Internet. • Making policies to verify different source rather than single source.
- 15. Thank you For more please visit : http://premlamsal.com.np
Editor's Notes
- #12: Randomly call garni company ma like for technical support and reach someone with legitamite problem, they will be grateful that you called them back, they will follow your instruction. The attacker will help the user but will really have the victim type command that will alow the attacker to install malware.