Social Engineering

SocialĀ engineeringĀ is the practice of learning and obtaining valuable information by exploiting human vulnerabilities. On security infrastructure, There are people, process, and technology. People are the weakest link in the security defense of any organization.

Attack Process
1.Intelligence gathering
2.Identifying vulnerable points
3.Planning the attack
4.Execution

Attack methods
1.Impersonation: Pretend to be someone else to gain trust
2.Reciprocation: Exchanging a favor in terms of gaining a mutual advantage
3.Influential authority: Manipulates the target’s business responsibilities

This entry was posted in Uncategorized. Bookmark the permalink.