Social Engineering Theory
You may have heard the term "social engineering" in the news and in computer security warnings. Social engineering has typically been associated with computer hacking, but in reality hackers don't often use any tech savvy to perpetrate cons. Instead, they use manipulation. Spending a few moments reading about social engineering can protect you from identity theft and other scams.
Other People Are Reading
-
What Is Social Engineering?
-
The theory of social engineering has importance in just about every part of life, from computer hacking to politics and even relationships. The basic tenet of social engineering theory contends that one can gather personal information and other knowledge someone maintains through conversation. Often, the victim can help the attacker without being attacked by giving some credible information that can be used on a third party.
Computer Hacking
-
A computer intrusion using a social engineering attack often doesn't even need computers. Social engineering attackers may impersonate a repairman and gather enough information to access a company's or government's computer network. The social engineer may even dress like a new employee and attempt to extract a general log-in code for the network.
-
Intelligence Organizations
-
Intelligence organizations actively implement defensive measures against social engineering and often have people trained to carry out a social engineering attack. Psychologists often hold positions in the intelligence sector dedicated entirely to finding out how susceptible an agent is to manipulation tactics. Psychologists may turn the tables and train an officer to manipulate a enemy for information.
Pretexting
-
One part of social engineering theory uses the idea of "pretexting," using one piece of information you already know about the target to give yourself some credential and use it as a gateway to more information. Corporations sometimes use this tactic when investigating personnel they believe might divulge company secrets, or have committed corporate espionage.
Common Scams
-
The only time an average person deals with social engineering is through email scams called "phishing." Phishers send out mass emails impersonating important financial institutions to fool users into giving sensitive account information. By impersonating well-known institutions, phishers have a high chance of reaching people who are customers of the institution they impersonate.
-
