Social Engineering The Real ETerrorism
One evening, during the graveyard shift, an AOL technical support operator took a call from a hacker. During the hour long conversation the hacker mentioned he had a car for sale. The technical support operator expressed an interest so the hacker sent him an e-mail with a photo of the car attached. When the operator opened the attachment it created a back door that opened a connection out of AOL’s network, through the firewall, allowing the hacker full access to the entire internal network of AOL with very little effort on the hacker’s part.
The above is a true story and it is an excellent example of one of the biggest threats to an organisation’s security - social engineering. It has been described as people hacking and it generally means persuading someone inside a company to volunteer information or assistance.
Examples of techniques employed by hackers include:
- Unobtrusively observing over your shoulder as you key in your password or PIN.
- Calling helpdesks with questions or being overly friendly
- Pretending to be someone in authority.
Social engineering attacks can have devastating consequences for the businesses involved. Accounts can be lost, sensitive information can be compromised, competitive advantage can be wiped out and reputation can be destroyed.
By implementing some simple techniques you can reduce the risk of your organisation becoming a victim or, in the event that you are targeted, keep the consequences to a minimum.
- Make sure that all staff, especially non-IT staff, are aware of the risk of social engineering and what to do in the event of such an attack.
- Conduct regular security awareness training so that all staff are kept up to date with security related issues.
- Implement a formal incident reporting mechanism for all security related incidents to ensure there is a rapid response to any breaches.
- Ensure that the company has security policies and procedures in place, that all staff are aware of them and that they are followed.
- Put an information classification system in place to protect sensitive information.
Conduct regular audits, not only on IT systems but also on policies, procedures and personnel so that any potential weaknesses can be addressed as soon as possible.
Rhona Aylward has extensive experience in the area of Quality Management and more recently in Information Security Management. She is a qualified Lead Auditor for BS7799 and CEO for Alpha Squared Solutions Ltd.
Previous Articles Highlighter:
The Rules Of The Road By Kevin Schappell (1)
Keep that in mind the next time you squeeze in front of a truck at the stop light. Also, heavy trucks while on the highway will slow down while going up large hills but pick up speed on the downhill side.
Temp Gretta And The Great Seattle Race (2)
In the dead of night they gathered, this gang for sly and sneaky temps, to fight for the longest and best temporary employee assignment in Seattle. Make no mistake about it, they would fight to the death if need be, and the losers had already pledged to turn the job down.
How To Take Your Stalled Projects To The Finish Line (3)
Some people need a certain amount of pressure to get moving.(4) List up to three goals that you'd like to accomplish in the next six months, even if you do nothing else.
To Grow Out Of Unemployment (4)
Think about a professor of economy who studied and taught Marxist economy from the wrong textbooks – he is quite useless in a capitalist market economy and might find himself unemployed despite his high education.
What Is Road Hazard Warranty? Do You Really Need It? By Gene Grant (5)
Let's start off by expalining exactly what is a Road Hazard warranties and how does it save me money?Most Road Hazard warranties are set up to protect you, from paying full price, even if you happen to get a flat or even destroy a tire beyond repair.
Using Sector Funds To Construct Diversified Mutual Fund Portfolios (6)
The power-packed cluster of sector funds may offer investors the potential to outperform the market averages.3. Diversifying mutual fund portfolios across sectors is good investing practice.Notes: This report is for information purposes only.
Venture Leasing A Smarter Way To Build Enterprise Value (7)
Are the income projections realistic? Is pricing of the product or service sensible? How much cash is on hand and how long will it last according to the projections?
Useful Tips On Buying A New Or Used Car By John Mussi (8)
Home loans can be used for any purpose such as, new car, home improvements, pay of store card or credit card debt and debt consolidation. Home owner loans are available for practically any reason.
Why Your Mutual Fund Doesn’t Return As Much As You Think (9)
Because you don't know what specific assets a mutual fund owns on a daily basis, you could wind up owning the same stocks in several different funds. Or the types of stocks the fund buys now may differ from the ones it set out to buy when you originally invested.Significant tax hits.
Why Mobile SMSText Messaging (10)
B2B ApplicationsCustomized mobile applications conforming to a business rule and addressing a specific target audience. Example: MIS reports to mobile sales force, critical data to mobile technical work force.
Better Decisions Balancing Efficiency BuyIn (11)
B. Consultation You share the problem with others, either individually or in a group, asking for ideas and suggestions. Then you decide. Your decision may or may not reflect the suggestions made by others.
A Mass Customization Revolution (12)
The lack of contact with materials attributes to the higher yield rates. Because the process of using a laser is automated, the process tends to be far more repeatable than most methods.
Why PR Is An Engine For Economic Growth (13)
manager and his or her PR colleagues will have to monitor those perceptions themselves. Actually, they should be quite familiar with perception and behavior matters. Getting that activity under way means meeting with members of that outside audience and asking questions like “Are you familiar with our services or products?” “Have you ever had contact with anyone from our organization?
Step Back To Succeed In Decision Making (14)
As a supervisor or manager, there will undoubtedly be a time when you will have to make more important, and sometimes instantaneous, decisions. That’s when all of the practicing will pay off.
How To Negotiate A Settlement With An Insurance Claims Adjuster By Dan Baldyga (15)
People who've gone through exactly what happened to you, with the same sort of claim as yours. Sure, you had a period of discomfort but your so-called injuries were routine.
Something New For Managers (16)
Actually delivering the message is the least complex step in the public relations problem solving sequence. Fortunately for you, there is a large collection of communications tactics available to you ranging from your own personal contacts, service or product promotions, news announcements and consumer briefings to newsletters, media interviews, emails and dozens of other tactics.
7 Work At Home Mistakes To Avoid (17)
For more information about SPAM and how to avoid it. Please visit this site: Friends House In Rose hill: http://www.rosehill.org/spam.htm 3. Posting ads on Forums: Like spamming , posting ads on forums message boards can [most likely will] get you banned.
Three Proven Steps To Improve Your Home Business Advertising Response In Just 1 (18)
Your goal should be to repeat and improve what works for you. If you do, you will not need a budget and you will be able to predict what kinds of repeat and new business each promotion will generate.Bob MarkovskyMillennium Services GroupStart Your Own High Profit Cleaning Businesshttp://www.Cleaning-Biz.comMillennium Services Group has been assisting people to start and succeed in their own cleaning businesses since 1999.Article copyright Millennium Services Group - 2004
This Is The Power Of PR (19)
Words that are compelling, persuasive and believable AND clear and factual. You must do this if you are to correct a perception by shifting opinion towards your point of view, leading to the desired behaviors.
Working As A Knowledge Worker In The Information Age (20)
One company for example has created the 'thief of the year' award. It is given the person who can find something in the public domain which he/she then leverages to substantially improve the corporate bottom line.
Newer Articles Highlighter:
Who Is Running Your Business (1)
Those who know him will assure you that he does a great job of bringing people together-which is why he started INTEGRITY.Involved with networking organizations since 1984, Gerry is an Accomplished Toastmaster, a member of Toastmaster International, a board member of the Oceanside and Vista Chambers of Commerce, and chairs numerous committees for three chambers of commerce.
Can You Really Improve Your Organisation Skills (2)
They also plan out their day ahead of time. These habits can be learned by anyone.""Improving your organisation skills is teachable and there are hundreds of tools to help you achieve that end.
Want To Loosen Uncle Sam’s Grip On Your Wallet (3)
These and many other costs may be deductible if they exceed 2 percent of your adjusted gross income: union dues, subscriptions to professional journals, tax preparation fees, costs for a uniform you wear at work, expenses incurred looking for a new job and continuing education expenses.Plan for Your RetirementIn addition to being a great way to save for retirement, employer-sponsored retirement plans, such as 401(k)s, offer savings on your current income taxes.
Why Choose A Bad Credit Personal Loan (4)
However created, your past record of CCJ’s (County Court Judgements), mortgage or other loan arrears can live on to deny you access to finance that other people regard as normal.
The 21st Century Way To Build Equity (5)
Once you've tried this equity acceleration program (EAP) for yourself, you'll realize its value.With more available choices, creating enjoyable lifestyles and looking out for your family's financial well being is easier today than it ever has been.
How Your Auto Insurance Rates Are Determined By A. Chris Tijerina (6)
One area may have higher lawsuit payouts or higher theft rates than another area. Even if you live in a affulent area your rates may be higher due to the higher value vehicles in your area cost more to fix than in an area with lower value vehicles.
Characteristics Of High Performance Teams (7)
Circle the characteristics that describe your team; cross off those that don't describe your team.PARTICIPATIVE LEADERSHIPEnvisioning leadership and organizing leadershipClear leadership role that is sharedEnables people to make choicesShared normsShared valuesMembers drawn to the teamTeam identityBelonging/membershipSynergismFuture focusedALIGNED ON PURPOSE AND VISIONCommon shared purposeClear shared visionSelf directingHigh moraleTeam goals align with personal goals and organization goalsProblem solving, not laying blameClear, shared understanding of team members' rolesTASK FOCUSEDChallenging tasksIndividual accountability/ownershipEquality in workloadQuality focusClear tasks and milestonesMutual respect for abilityCommitmentSHARED RESPONSIBILITYShared decision makingRewards linked to team performanceRecognize expertise/value added in individualsCooperationClear standards of acceptable performanceCelebrates successClear authority and responsibilityContributionMembers responsible for team successINNOVATIVECreative talentsMay promote personal relationshipsRespect for individualsEmpowered and empoweringPROBLEM SOLVINGUpfront and direct; confronts issues not peopleTrustClear decision-making processConflicts managed wellFreedom to express ideasFreedom to share opinionsSTRONG COMMUNICATIONSuperb communicationOpen communicationOpennessClear communication channelsShare common language and terminologyExternal communicationsTime managed wellStructure, purposeful meetings (facilitator, timekeeper, recorder, scribe)RESPONSIVEUnite/partner with other teamsFlexibleOutward focusedFocus on the customerAllows risks and mistakesPromotes group learningSELF MONITORINGSelf correcting; evaluates its own performanceIndividuals pleased with work resultsAssigns opposing viewsTerence R.
What You Must Know When Marketing Your Business (8)
What to do about it? How attractive is your product or service to the consumer?HOW DO YOU GET THERE? Target market Staff involvement Most effective strategies for marketing and selling your services/product What is your plan of action?
Yesterday’s Project Manager Is Today’s Project Engineer (9)
Younger engineers are stuck with older/outdated titles but their responsibilities are growing and they are expected to do more and produce more. Younger engineers do the bulk of work and when it comes to the face value with clients and the company's brass, they are getting almost nothing.
Become A Customer EnthusiasmGuru (10)
Ask for feedback and follow through. Ask your customers (either through a survey, an e-mail request or by a phone call) how you can continue to serve them -- even better.
How To Walk The Floor And Talk To Customers (11)
This always starts a conversation and then you can ask them what they think about your store. 3. Clean the Tables An alternative approach is to clean the tables in a restaurant or work on bag filling at the checkout.
Negotiating Rates With Your Credit Card Company (12)
Are you pleased with the overall service that you are receiving? Do you like their benefits? If the answer is yes then you can proceed. If not, you should stop reading this article and start looking for a better company.Second, you should evaluate your paying history and make sure that it is positive before you call to negotiate.
What Is Optimum Performance (13)
The game of life is about choosing what you really want. The real trick in having more is in becoming more and having fun. It is natural to grow and become more, when we do what we love and what we want.
How To Turn Business Losses Into Cash Flow (14)
However, there is nothing preventing a partnership agreement specifying a partnership split other than 50/50, so that one partner can receive more of the loss than the other. It would be prudent for the partnership agreement to record the reasons for the ratio used.So, how does it work?
Closing The Deal By Kevin Schappell (15)
If your trade-in is in good shape you should be looking for a price somewhere between retail and wholesale. If your car is spotless make sure the dealer knows he will not have to recondition it.
Why “Good Enough” Isnt (16)
Second, this perspective treats "good enough" as though it were some clearly identifiable goal--a distinct line of demarcation, separating the unsatisfactory from the unnecessary. In reality, this boundary can be quite fuzzy.
Taking The Guesswork Out Of Finding A Good Auto Technician By ARA Content (17)
Those who pass a battery of exams and fulfill the experience requirement earn Master Technician status.The tests, developed by industry experts with oversight from ASE's in-house pros, are administered by ACT, the same group known for its college entrance exams.There are specialty exams covering all major areas of repair.
Trading For A Living Part 1 (18)
Is it really possible to trade for a living?The DreamYou know how it is, you’re sitting in a traffic jam at some unearthly hour of a particularly wet and miserable morning, on the way to the same office you have sat in for too long to remember, and you’re thinking - there must be a better way – life shouldn’t have to be like this.
What To Ask Before You Hire Security Services For Your Buisness (19)
This has a variety of adverse affects on your business right away! First the old cliché, “You get what you pay for” has never been more appropriate than when you hire security at a low rate per hour!
A PR Surprise For Managers (20)
This lets you broaden your public relations field of fire, putting its primary focus where it belongs, on your units key external stakeholder behaviors. A caveat here: be sure that the public relations personnel assigned to your unit really believe deep down -- why its SO important to know how your most important outside audiences perceive your operations, products or services.