Security Information

Social Engineering - The Real E-Terrorism?


One evening, during the graveyard shift, an AOL technical support operator took a call from a hacker. During the hour long conversation the hacker mentioned he had a car for sale. The technical support operator expressed an interest so the hacker sent him an e-mail with a photo of the car attached. When the operator opened the attachment it created a back door that opened a connection out of AOL's network, through the firewall, allowing the hacker full access to the entire internal network of AOL with very little effort on the hacker's part.

The above is a true story and it is an excellent example of one of the biggest threats to an organisation's security - social engineering. It has been described as people hacking and it generally means persuading someone inside a company to volunteer information or assistance.

Examples of techniques employed by hackers include:

  • Unobtrusively observing over your shoulder as you key in your password or PIN.

  • Calling helpdesks with questions or being overly friendly

  • Pretending to be someone in authority.

Social engineering attacks can have devastating consequences for the businesses involved. Accounts can be lost, sensitive information can be compromised, competitive advantage can be wiped out and reputation can be destroyed.

By implementing some simple techniques you can reduce the risk of your organisation becoming a victim or, in the event that you are targeted, keep the consequences to a minimum.

  • Make sure that all staff, especially non-IT staff, are aware of the risk of social engineering and what to do in the event of such an attack.

  • Conduct regular security awareness training so that all staff are kept up to date with security related issues.

  • Implement a formal incident reporting mechanism for all security related incidents to ensure there is a rapid response to any breaches.

  • Ensure that the company has security policies and procedures in place, that all staff are aware of them and that they are followed.

  • Put an information classification system in place to protect sensitive information.

Conduct regular audits, not only on IT systems but also on policies, procedures and personnel so that any potential weaknesses can be addressed as soon as possible.

About The Author

Rhona Aylward has extensive experience in the area of Quality Management and more recently in Information Security Management. She is a qualified Lead Auditor for BS7799 and CEO for Alpha Squared Solutions Ltd.

www.a2solutions.co.uk, raylward@a2solutions.co.uk


MORE RESOURCES:

guardian.co.uk

Hillary Clinton, Robert Gates on Obama national security team
Los Angeles Times, CA - 1 hour ago
By Rick Pearson Reporting from Chicago -- President-elect Barack Obama unveiled his national security team today, including formally announcing his ...
Video: Obama names Clinton US secretary of state AlJazeeraEnglish
Obama Unveils His National Security Team FOXNews
Barack Obama Unveils National Security Team, Taps Former Rival ... ABC News
New York Times - Bloomberg
all 3,797 news articles


CTV.ca

Obama chooses Ariz. gov. for Homeland Security
FOXNews - 2 hours ago
Janet Napolitano to head the Department of Homeland Security. He told a Chicago news conference Monday that Napolitano has spent her career protecting ...
SCENARIOS: Major issues facing US Homeland Security chief Reuters
Manchin, Daschle Congratulate Napolitano on Homeland Security ... MarketWatch
Obama Names National Security Team The Washington Independent
Turkish Press - The Colorado Independent
all 493 news articles


Malaysia Star

After Mumbai, Debating Security at Luxury Hotels
New York Times, United States - 12 hours ago
Worse, hotel executives and security experts say that little can be done to stop extensively trained gunmen with military assault rifles and grenades who ...
Mumbai terror attacks: India steps up security amid fears of ... guardian.co.uk
International hotels draw elites and terror threat The Associated Press
Mumbai attacks: India says all militants were from Pakistan Telegraph.co.uk
Times of India - CNN
all 428 news articles


Malaysia Star

Obama names national security team
Boston Globe, United States - 2 hours ago
President-elect Barack Obama this morning is introducing his high-powered national security team, a lineup that includes a former rival, a key campaign ...
Obama Picks Muscular National Security Team, Including Former ... U.S. News & World Report
Obama’s Choice for UN Is Advocate of Strong Action Against Mass ... New York Times
Obama To Introduce Security Team TurnTo23.com
WVLT - Grist Magazine
all 450 news articles


USA Today

Jones named as national security adviser
guardian.co.uk, UK - 1 hour ago
AP foreign, Monday December 1 2008 CHICAGO (AP) - President-elect Barack Obama has selected retired Marine General James Jones to be his national security ...
Obama's national security team a diverse mix USA Today
High Praise For Obama's National Security Team U.S. News & World Report
Team Obama: New National Security Adviser, Jim Jones, Puts Energy ... Wall Street Journal Blogs
TIME - Xinhua
all 287 news articles


The Inquisitr

Obama’s National Security Team Announcement
New York Times, United States - 37 minutes ago
The following is the prepared text of President-Elect Barack Obama’s National Security Team announcement as provided by the Obama team. ...
Obama and the price of loyalty Financial Times
all 22 news articles


New York Times

Obama Unveils His National Security Team
New York Times, United States - 23 minutes ago
James L. Jones, the former NATO commander, to be national security adviser; Gov. Janet Napolitano of Arizona to be secretary of homeland security: Susan E. ...


Boston Globe

Core Security Expert to Participate in Roundtable at Committee on ...
MarketWatch - 4 hours ago
The event is being hosted by the Majority Staff of the House Committee on Homeland Security, and will feature a series of roundtable discussions on the ...
Homeland Security in disarray, officials warn Boston Globe
all 9 news articles


1010 Wins

It Hurts To Be John Kerry Today
Washington Post, United States - 1 hour ago
"President-Elect Obama has chosen a terrific national security team to protect our security and help restore America's rightful place in the world," Kerry ...
Kerry congratulates Clinton and other national security nominees Politicker MA
Bill Clinton praises wife's nomination International Herald Tribune
John Kerry, Ted Kennedy praise Hillary Clinton nomination Boston Herald
Politicker MA
all 200 news articles


Live Blog: Presenting the National Security Team
New York Times, United States - 2 hours ago
The Team | 10:42 am Mr. Obama’s new national security team is now on stage: Mrs. Clinton; Robert M. Gates, the current defense secretary, who will remain in ...
Who Will Protect Hillary Clinton? Washington Post
all 3 news articles

Security - Google News

home | site map
© 2006