Social Engineering and Internal Threats

Institution:
Course Title:
Instructor:
Date:
How social engineering attacks are carried out
Social engineering has been used as an art utilizing human behavior to interfere with security, without the participant realizing that manipulation has occurred. One of the common techniques used in social engineering is the direct approach. Occurs when an individual who not actually the owner of the computer tries to log in the system. He accesses the network and the other persons database causing corruption of the system without having his identity revealed (Sans institute, 2003). Spying ad eavesdropping is mostly used as the spy observes the user typing in their user name and password therefore providing the spy with an avenue of getting to an individual information. Huckers at some point may pretend to be responding to an individual’s request in a bid to provide help. Once the individual gives them their trust and opens up to the opportunity, exploitation is done through commands which makes criminals get back to the individual’s computer. Most times, hijackers also use an individual’s email so that they can get access to that individual’s contact list. Once the criminals are in control of an individual email, they send emails to everyone on their contact lists and even get to the person’s friend’s friend’s. (W...