Introducing social engineering
Security is made up of many different elements, but people are the most crucial and frequently the most susceptible to compromise. All other security failures fall upon the human making mistakes; even vulnerabilities in software are the result of human error. All security mechanisms will fail if a user is irresponsible about protecting their login information. To improve security from endpoints, it is important to incorporate security strategies and policies covering social engineering, social engineering attacks, and the consequences of their negligence.
As noted in the introduction, social engineering is the act of manipulating people to bypass security measures and/or steal information from people. Social engineering attacks are distinct since they do not need to interface with the target systems or networks; this is why they are referred to as non-technical attacks. This may be accomplished by the following:
- The target is persuaded to divulge...
