Anyone know any good introductions to the concept of social engineering that I can give to helpdesk workers to help them spot suspicious activity? I'm looking for a few examples and a few tips on how to avoid being caught out.
7
votes
closed as off-topic by HopelessN00b Feb 13 '15 at 16:12
This question appears to be off-topic. The users who voted to close gave this specific reason:
- "Requests for product, service, or learning material recommendations are off-topic because they attract low quality, opinionated and spam answers, and the answers become obsolete quickly. Instead, describe the business problem you are working on, the research you have done, and the steps taken so far to solve it." – HopelessN00b
locked by HopelessN00b Feb 13 '15 at 16:12
This question exists because it has historical significance, but it is not considered a good, on-topic question for this site so please do not use it as evidence that you can ask similar questions here. This question and its answers are frozen and cannot be changed. See the help center for guidance on writing a good question.
Read more about locked posts here.
2
votes
Here are some listed examples: http://www.symantec.com/connect/articles/social-engineering-fundamentals-part-i-hacker-tactics ... but I think your primary defense is basic education and common sense. Test for a rudimentary ability to detect soceng during the hiring process.
2
votes
Kevin Mitnick - "The Art Of Deception". Fantastic read.
answered Oct 22 '10 at 18:58
0
votes
Yeah, tell them not to give out information to people they don't know and can't verify the identity of.
-
I was kind of hoping for links to articles and stuff, not just random small tips. – rjmunro Oct 22 '10 at 16:28
-
1@rjmunro - Honestly, it all comes down to exactly what joeqwerty said. One could get all verbose and talk about the inticracies of social engineering attacks, but when you boil it down, you end up with the ability to employ common sense. – EEAA Oct 23 '10 at 0:19
-
@ErikA: One example story from the Kevin Mitnick book (mentioned in another answer) is a hundred times better than any amount of just telling people not to give out information. – rjmunro Oct 23 '10 at 23:58
