Companies Exposed to Attacks
A lot of people think they are not gullible, that they can't be manipulated, but nothing is further from the truth. Many techniques, as well as substantial technical know-how, can allow someone to break into almost any targeted system.
Social engineers attempt to break into systems by persuading unwitting staff to part with vital information, including login names and passwords. The threat of social engineering is substantial. People should know that you can buy the best technology in the world and it won't protect the organization against social engineering.
Lack of training means that staff are often unaware of the dangers and will hand over sensitive information to strangers on the phone posing as someone else in the company.
For example, a hacker can take control of a telecoms' operator switching equipment by calling the company and posing as an engineer from a switch Network. Staff coulc be persuaded to hand over login names and passwords for the switches so that the 'Network engineer' could perform remote maintenance.
Security procedures are frequently undermined by senior executives who demand that staff bend the rules when they want something done immediately. As a result, staff often will not question a request purporting to come from the CEO's office, for example.
Social engineers normally do a lot of research on their targets before attacking. A social engineer needs to understand the corporate culture, the corporate structure, the organisational chart, who has access to what information, and where in the company that information resides.
Valuable data can often be found in the company's recycle or garbage bins. These things ought to be locked and kept on private property. Sensitive files should be shredded before they are thrown out.
In addition to the usual technical security procedures like regular port scanning and spyware scanning for example - organisations need to rigorously enforce security policies and train staff to be alert to the dangers posed by social engineers, particularly in companies that might be targeted by industrial spies.
You will find much more on this topic at WorldsLargestNetwork.com
| |||||||
 | |||||||
| |||||||
| |||||||
| |||||||
|
WorldsLargestNetwork.com
