Hacking Humans : Social Engineering Techniques and How to Protect Against Them
summary
Social engineering causes real breaches: phishing represents 77% of social attacks and clicking links accounts for 88% of reported phishing; phone fraud targeted ~2.4M U.S. customers in 2012 and 2.3M in the first half of 2013, with average losses of roughly $2–4k per compromised account. Attacks use pretexting, elicitation, OSINT (LinkedIn), dumpster diving, malware keyloggers/screenshots, shoulder surfing and delivery impersonation; effective defenses are ID checks and escorts for visitors, shredding, drive encryption, patching, no unknown USBs, info classification and regular staff training.
AI-written summary · about
chapters (18)
- 0:00Intro
- 3:503 Methodologies
- 5:45Statistics : Impersonation
- 6:32Types of Social Engineer
- 7:40Why Social Engineering?
- 8:30Common Attacks
- 9:44Kevin Mitnick
- 11:05Frank Abagnale
- 12:04Charles Ponzi
- 12:43Social Engineering Techniques
- 12:56Information Gathering
- 21:34Questioning Techniques
- 23:31Pretexting vs Elicitation
- 25:06Manipulation - Fear
- 25:44Manipulation - Guilt
- 26:08Manipulation - Foot in the Door
- 27:20Personal Mitigation Techniques
- 32:41Corporate Mitigation Techniques
related talks
44mHacking Humans: Social Engineering Techniques
50mHacking Humans : Social Engineering Techniques and How to Protect Against Them
55mHacking Humans
25mHacking the human mind: The rise of social engineering security threat
35mProtecting the Organization: The Psychology of Social Engineering
46mSocial Engineering: Hacking Humans
30mSecurity Starts With You: Social Engineering
51mSocial Engineering: Hacking People