Itt3 its social engineering

530 views

Published on

Published in: Technology, News & Politics
0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total views
530
On SlideShare
0
From Embeds
0
Number of Embeds
1
Actions
Shares
0
Downloads
16
Comments
0
Likes
0
Embeds 0
No embeds

No notes for slide

Itt3 its social engineering

  1. 1. Social engineering Servers and network 2012 Autumn Morten Bo Nielsen Mon@eal.dk
  2. 2. Old school Its all about the money ● Hustling ● Scams ExampleNetworks and servers - Mon@eal.dk 2
  3. 3. Psychology of scams“cognitive and motivationalprocesses” ● trust and authority ● visceral triggers ● human desires and needs ● greed, fear, avoidance of physical pain, or the desire to be likedNetworks and servers - Mon@eal.dk 3 Go here for full story
  4. 4. Inducing judgement errors ● Scarcity cues ● Unique opportunity ● Induction of behavioural commitment ● Start small and get them rolling ● Extreme cost/benefit ● Lack of emotional control ● A psychological trait of victimsNetworks and servers - Mon@eal.dk 4
  5. 5. ExamplesWho needs spam, when we have this linkhttp://www.urbanmillionaires.com/Question: ● Is it true? Is it trustworthy? ● Puts words on it from the previous slides. ● Still think it is trust worthy?Networks and servers - Mon@eal.dk 5
  6. 6. ExamplesEmotional distresssteal a womans hand bagQuestion: ● Is this possible? ● Is she gullible?Networks and servers - Mon@eal.dk 6
  7. 7. Still old school ● Gaining access to places you are not allowed ● http://www.youtube.com/watch?v=kOEWd_M5m44 ● The secret: Look as if you belong.Networks and servers - Mon@eal.dk 7
  8. 8. Relation to security ● No security with physical access ● Why go through the firewall, if you may walk past?Networks and servers - Mon@eal.dk 8
  9. 9. People on the move Steal the laptop (covertly) laptops in airportsNetworks and servers - Mon@eal.dk 9
  10. 10. People on the moveUse their telephones against them ● for profit ● reading the calendar, mails, SMS ● As a bugNetworks and servers - Mon@eal.dk 10
  11. 11. People on the move ● Mobile IT ● A security nightmare ● Too many variables Is this ok to use? Could it be fake?Networks and servers - Mon@eal.dk 11
  12. 12. People at the office ● Make them tell you their passwords. ● Teachers recurring story – this time with an external reference.... ● from the BBCQuestion: ● Is this realistic? In Denmark?Networks and servers - Mon@eal.dk 12
  13. 13. People at the office ● Spam ● Check your mailboxNetworks and servers - Mon@eal.dk 13
  14. 14. People at the office ● Receptionists are a crucial part of security ● Educate people ● Like this?Networks and servers - Mon@eal.dk 14
  15. 15. Closing word Which on to use? Technical vs. social Answer: Both To read more, see thisNetworks and servers - Mon@eal.dk 15

×