Social Engineering

Social Engineering refers to non-technical intrusions that rely on human interaction and often involve tricking other people to break normal security procedures. Social engineers often rely on people’s natural helpfulness as well as their weaknesses. Gaining the confidence of an authorized network user and getting him or her to reveal compromising information, whether through appeals to vanity or authority, faked ‘urgent’ problems, or old-fashioned eavesdropping, are common SE techniques.

Social engineering also taps into the inability to keep up with a culture heavily reliant on information technology. Most people are not aware of the value of the information they possess and are careless about protecting it. Frequently, social engineers will search dumpsters for valuable information, memorize access codes by looking over someone's shoulder (‘shoulder surfing’), or take advantage of personal passwords that can be easily guessed.

Dynamic’s Social Engineering assessment identifies security weaknesses in policies, procedures and training from the human perspective. We can assist your company in developing employee education programs to increase awareness of Social Engineering techniques and how to best protect sensitive information and systems.