Prevention and Mitigation

The previous chapters have highlighted the danger that is social engineering. A number of the tricks and techniques used in social engineering have been explained as well as the tools used to effect an attack. These techniques have been portrayed to be so effective and powerful, yet the targets are so weak to a point where one wonders whether there is any hope of fighting social engineering. The reality is that due to the lack of preparedness of many people for this type of an attack, the failure chances of social engineering attacks are low. This is the main reason why organizations are investing in disaster recovery and incidence response because there is a looming danger of getting hacked through their users. However, the situation is not hopeless. Prepared employees and individuals can easily identify and thwart social engineering attacks. This chapter...