Social Engineering The Real ETerrorism
One evening, during the graveyard shift, an AOL technical support operator took a call from a hacker. During the hour long conversation the hacker mentioned he had a car for sale. The technical support operator expressed an interest so the hacker sent him an e-mail with a photo of the car attached. When the operator opened the attachment it created a back door that opened a connection out of AOL’s network, through the firewall, allowing the hacker full access to the entire internal network of AOL with very little effort on the hacker’s part.
The above is a true story and it is an excellent example of one of the biggest threats to an organisation’s security - social engineering. It has been described as people hacking and it generally means persuading someone inside a company to volunteer information or assistance.
Examples of techniques employed by hackers include:
- Unobtrusively observing over your shoulder as you key in your password or PIN.
- Calling helpdesks with questions or being overly friendly
- Pretending to be someone in authority.
Social engineering attacks can have devastating consequences for the businesses involved. Accounts can be lost, sensitive information can be compromised, competitive advantage can be wiped out and reputation can be destroyed.
By implementing some simple techniques you can reduce the risk of your organisation becoming a victim or, in the event that you are targeted, keep the consequences to a minimum.
- Make sure that all staff, especially non-IT staff, are aware of the risk of social engineering and what to do in the event of such an attack.
- Conduct regular security awareness training so that all staff are kept up to date with security related issues.
- Implement a formal incident reporting mechanism for all security related incidents to ensure there is a rapid response to any breaches.
- Ensure that the company has security policies and procedures in place, that all staff are aware of them and that they are followed.
- Put an information classification system in place to protect sensitive information.
Conduct regular audits, not only on IT systems but also on policies, procedures and personnel so that any potential weaknesses can be addressed as soon as possible.
Rhona Aylward has extensive experience in the area of Quality Management and more recently in Information Security Management. She is a qualified Lead Auditor for BS7799 and CEO for Alpha Squared Solutions Ltd.
Previous Articles Highlighter:
The Rules Of The Road By Kevin Schappell (1)
With road rage being so common these days, we should all take a step back and review a few rules of the road. While not taught in most driver education classes or state driver's manuals, these rules will help you be a better driver.
Temp Gretta And The Great Seattle Race (2)
But what kind of race would be fair? Temps came in all shapes and sizes. Some were old, some young, some fat, some ugly and some … well, Gretta would only say she couldn’t compete with some of them.Eighteen Wheelers, decided Gretta.
How To Take Your Stalled Projects To The Finish Line (3)
Some people need a certain amount of pressure to get moving.(4) List up to three goals that you'd like to accomplish in the next six months, even if you do nothing else.
To Grow Out Of Unemployment (4)
This became part of a new paradigm in economy which proclaimed the death of the business cycle and of the inflationary boom-bust phases. Though exaggerated and probably untrue, the "New Paradigm" did predict that productivity will grow, inflation will remain subdued, unemployment will decrease drastically and the prices of financial assets will explode – all simultaneously (which was considered hitherto impossible).
What Is Road Hazard Warranty? Do You Really Need It? By Gene Grant (5)
You are prepared to spend an average of $300 - $500 for new sneakers for you vehicle. It's a maintenance item that is not optional and then the salesperson asks you if you want to purchase the Road Hazard warranty."It's ONLY an additional $10 - $20 for each tire," he or she says.
Using Sector Funds To Construct Diversified Mutual Fund Portfolios (6)
Sector funds are among the more misused and misunderstood investments. So, how should you use sector funds?Before looking at one of the uses of sector funds in detail, let’s review what sector funds really are: Sector funds confine their investments to a particular sector of the economy.
Venture Leasing A Smarter Way To Build Enterprise Value (7)
Parker is an industry leader, frequent panelist and author of several articles pertaining to equipment financing.Headquartered in Wilton, CT, LTI is a leasing firm specializing nationally in direct equipment financing and vendor leasing programs for emerging growth and later-stage, venture capital backed companies.
Useful Tips On Buying A New Or Used Car By John Mussi (8)
That’s why it’s important to know how to make a smart deal. Think about what car model and options you want and how much you’re willing to spend. Do some research.
Why Your Mutual Fund Doesn’t Return As Much As You Think (9)
Because you don't know what specific assets a mutual fund owns on a daily basis, you could wind up owning the same stocks in several different funds. Or the types of stocks the fund buys now may differ from the ones it set out to buy when you originally invested.Significant tax hits.
Why Mobile SMSText Messaging (10)
Statistics are already showing a considerable growth in the enterprise messaging, within the last seven quarters.Where does enterprise messaging fit into your businessNo matter what the nature or model of your business is, you can effectively exploit the potential of Mobile Messaging.
Better Decisions Balancing Efficiency BuyIn (11)
You can also take this a step further by asking your team to talk about how decisions are made. Identify the range of decisions that you and the team are responsible for.
A Mass Customization Revolution (12)
manufacturing was in a deep depression. Products were too costly, of poor quality and not innovative enough.Now, again, America is ranked No. 1 in manufacturing (World Competitiveness Report, 1996).Mass customizationAmerica’s No.
Why PR Is An Engine For Economic Growth (13)
You obviously want to correct those untruths, inaccuracies, misconceptions or false assumptions. One of the painful aspects of the whole drill is that a PR goal without a strategy to show you how to get there, is like a three-bean salad without the beans.
Step Back To Succeed In Decision Making (14)
In many cases the perceived right answer is not always the correct one. If your instinct is telling you something is not right – listen to it, ask it questions, that’s what it is there for.
How To Negotiate A Settlement With An Insurance Claims Adjuster By Dan Baldyga (15)
Believe me when I tell you they aren't worth much."You’re stunned. You can't believe what Strong is trying to pull. You say, "I’ve been miserable! There was no way I could get back to work because of the pain in my neck and back." Strong shift's in his seat and a victorious look (one that says he knows it all) begins to march across his face.
Something New For Managers (16)
He has been DPR, Pepsi-Cola Co.; AGM-PR, Texaco Inc.; VP-PR, Olin Corp.; VP-PR, Newport News Shipbuilding & Drydock Co.; director of communications, U.S. Department of the Interior, and deputy assistant press secretary, The White House.
7 Work At Home Mistakes To Avoid (17)
Any one who had decided to start their own "WORK AT HOME" business , is going to make mistakes along the way. Remember, no one is perfect, so it is expected to make mistakes as you learn.
Three Proven Steps To Improve Your Home Business Advertising Response In Just 1 (18)
Consider a Home Cleaning Service in a suburb of Cleveland that advertises in the Cleveland Plain Dealer due to the tremendous readership. If 75% of the cleaning company's clients and target prospects are 3 person families and larger, with incomes of $100,000 per year, living in suburbs A, B and C., they've wasted a big chunk of money.
This Is The Power Of PR (19)
A copy would be appreciated at bobkelly@TNI.net. Word count is 1085 including guidelines and resource box. Robert A. Kelly © 2004. Bob Kelly counsels, writes and speaks to business, non-profit and association managers about using the fundamental premise of public relations to achieve their operating objectives.
Working As A Knowledge Worker In The Information Age (20)
Engeström, 1999. “A Web on the Wind: The Structure of Invisible Work,” In: B. Nardi and Y. Engeström (guest editors). Computer Supported Cooperative work, volume 8, numbers 1—2 (special issue), at http://www.best.com/~nardi/InvisibleW.htmlE.
Newer Articles Highlighter:
Who Is Running Your Business (1)
What is the good life? Many describe the good life as having more flexibility, being able to come and go as we please. Most entrepreneurs I interview go out on their own because the values they acquire during a lifetime of experience (15 to 20 years) are different from when they started their corporate jobs.
Can You Really Improve Your Organisation Skills (2)
It's only a question of changing habits, however, everything is connected. You cannot be a complete mess in your personal life and expect to be perfectly organised in your business life."So you see it doesn't matter who or what you are, anybody can learn the basic fundamental skills and experience the daily benefits of being organised.It's just a case of recognising that you need to improve in that area and as mentioned in one of the comments, you have to have the desire to change.
Want To Loosen Uncle Sam’s Grip On Your Wallet (3)
Taxes will be due upon withdrawal at ordinary income tax rates. Withdrawals made prior to age 59 1/2 may be subject to an additional 10% penalty.Jim Larranaga is Executive Vice President of Priority Publications, a Minneapolis-based publisher of financial newsletters.Courtesy ARA Content, www.ARAcontent.com; e-mail: info@ARAcontent.com EDITOR'S NOTE: If you would like to run "Talking About Money" as a regular weekly column sponsored by a local financial institution, contact Jim Larranaga at 1-800-727-6397.
Why Choose A Bad Credit Personal Loan (4)
There are loan plans for applicants who have CCJ's and mortgage arrears, it doesn't matter how many months arrears you have or how many CCJ's you have registered against you, if you have the equity in your property the chances are that a loan plan can be tailored to suit your needs.
The 21st Century Way To Build Equity (5)
The good news is that help is here; the technology does exists giving consumers unparalleled conveniences plus an advantaged boost.Welcome to the 21st Century.Better Business Bureau (BBB) member, Bridgeco Central (BCC) is a distributor and national service provider in the U.S.
How Your Auto Insurance Rates Are Determined By A. Chris Tijerina (6)
If you have had a poor payment history or your policy has cancelled due to non payment you will have higher rates when you try to reapply for insurance. The higher your insurance credit score the better.
Characteristics Of High Performance Teams (7)
Circle the characteristics that describe your team; cross off those that don't describe your team.PARTICIPATIVE LEADERSHIPEnvisioning leadership and organizing leadershipClear leadership role that is sharedEnables people to make choicesShared normsShared valuesMembers drawn to the teamTeam identityBelonging/membershipSynergismFuture focusedALIGNED ON PURPOSE AND VISIONCommon shared purposeClear shared visionSelf directingHigh moraleTeam goals align with personal goals and organization goalsProblem solving, not laying blameClear, shared understanding of team members' rolesTASK FOCUSEDChallenging tasksIndividual accountability/ownershipEquality in workloadQuality focusClear tasks and milestonesMutual respect for abilityCommitmentSHARED RESPONSIBILITYShared decision makingRewards linked to team performanceRecognize expertise/value added in individualsCooperationClear standards of acceptable performanceCelebrates successClear authority and responsibilityContributionMembers responsible for team successINNOVATIVECreative talentsMay promote personal relationshipsRespect for individualsEmpowered and empoweringPROBLEM SOLVINGUpfront and direct; confronts issues not peopleTrustClear decision-making processConflicts managed wellFreedom to express ideasFreedom to share opinionsSTRONG COMMUNICATIONSuperb communicationOpen communicationOpennessClear communication channelsShare common language and terminologyExternal communicationsTime managed wellStructure, purposeful meetings (facilitator, timekeeper, recorder, scribe)RESPONSIVEUnite/partner with other teamsFlexibleOutward focusedFocus on the customerAllows risks and mistakesPromotes group learningSELF MONITORINGSelf correcting; evaluates its own performanceIndividuals pleased with work resultsAssigns opposing viewsTerence R.
What You Must Know When Marketing Your Business (8)
Marketing is both an art and a science. Anyone who says differently probably isn’t doing very well marketing his or her business. On the art side, intuition definitely plays into the equation.
Yesterday’s Project Manager Is Today’s Project Engineer (9)
What I mean is, todays project engineers are actively supervising new graduates, setting and monitoring schedules & budgets, interacting with clients and so on. A decade or so ago these duties were undertaken by project managers or supervisors who were promoted to that level largely bacause of seniority.
Become A Customer EnthusiasmGuru (10)
She is the author “How to Make Your Customers Crazy...about You” and has been a guest on “This Week in Small Business.” As a trainer and coach she has helped people across the country create and build the pet-care business of their dreams.
How To Walk The Floor And Talk To Customers (11)
If this applies to you, then take out a sample of products and ask customers to try them. This always starts a conversation and then you can ask them what they think about your store.
Negotiating Rates With Your Credit Card Company (12)
The company needs your business in order to be successful and with clients they lose big time. Therefore, you should always display this “take them or leave them attitude” while conducting your negotiations.
What Is Optimum Performance (13)
This question raises different responses from different people. It causes people to ponder issues like: Have you ever thought about how much better you could be doing in your business?
How To Turn Business Losses Into Cash Flow (14)
In Australia, there was an ATO income tax ruling (IT 2218) that allowed a partner to receive a salary – as long as the partnership agreement recorded it in writing – and this presented an opportunity to maximize the loss for one partner (the salaried partner), thereby maximizing the income tax refund.
Closing The Deal By Kevin Schappell (15)
The dealers will take clunkers but they end up on the auction block the next week. Once all the numbers are crunched and the papers are filled out double check everything before you sign.
Why “Good Enough” Isnt (16)
In reality, this boundary can be quite fuzzy. Often, customers don't know what they would consider to be satisfactory--not until they have gained more experience with the product. This means that a company is forced to guess at what constitutes "good enough"--and if they underestimate those requirements, they may have a lot of unsatisfied customers on their hands.
Taking The Guesswork Out Of Finding A Good Auto Technician By ARA Content (17)
Those who pass a battery of exams and fulfill the experience requirement earn Master Technician status.The tests, developed by industry experts with oversight from ASE's in-house pros, are administered by ACT, the same group known for its college entrance exams.There are specialty exams covering all major areas of repair.
Trading For A Living Part 1 (18)
There are many things to consider before taking the leap of faith.ConsiderationsBefore you even think about trading for a living you have to know how much money you need to live on, that is, how much cash do you need to generate every month in order to survive.
What To Ask Before You Hire Security Services For Your Buisness (19)
This can occur through security negligence, failure to protect or failure to properly train their staffs. Any way you look at it, they can cost you a lot of money if they make a mistake and you get sued for it, after all, you are liable for all that happens on your property.
A PR Surprise For Managers (20)
Department of the Interior, and deputy assistant press secretary, The White House. He holds a bachelor of science degree from Columbia University, major in public relations. bobkelly@TNI.net. Visit: http://www.prcommentary.com