|
|
|
|
|
|
|
|
|
Spear phishing
| Глоссарий терминов по социальной инженерии и информационной безопасности |
Just like phishing, but targeted at a specific person or group. spear-phishing is a highly focused attack with a higher probability of success due to a well-researched pretext. anti-phishing training can make employees more resilient against spear-phishing attacks.
|
|
Phish(ing), английский
- An e-mail or website designed to redirect you to a bogus website with the intention of gaining bank or credit card information, or to download malicious program onto a computer without the users knowledge.
- The technique is also often used to secure credit card numbers, bank account information, brokerage information, and generally anything that could yield a financial gain in line with fraud operations.
Phisher, английский
A malicious user who deceives people into revealing personal information, such as account passwords and credit card numbers. a phisher typically uses deceptive email messages or online advertisements as bait to lure unsuspecting users to fraudulent websites, where the users are then tricked into providing personal information.
Phishing, английский
- A technique used to trick computer users into revealing personal or financial information. a common online phishing scam starts with an e-mail message that appears to come from a trusted source but actually directs recipients to provide information to a fraudulent web site. phishing
- A social engineering technique in which the attacker masquerades as a legitimate website or communication in order to acquire sensitive information, such as passwords or credit card information. phishing messages can arrive via email, sms, tweets, instant messages, qr codes, or social media status updates. phishing emails are also used as a delivery method for ransomware that exhorts users to click on an attachment or url where malicious code encrypts their files in a matter of seconds. there are a number of techniques which can be used to help identify whether a suspicious email is a phishing attempt, such as examining the email headers, but there is no silver bullet. one of the safest ways to check the authenticity of a suspicious email is to contact the sender by phoning them – an old-fashioned solution to a modern problem.
Phishing confidence level, английский
A value between 1 and 8 that is assigned to a message based on its content and that reflects the liklihood that the message is phishing.
Phishing filter, английский
A filter that helps to identify fraudulent web sites and protect against personal data theft.
Phishing susceptibility framework, английский
Framework that correlates user attributes, such as culture, age, gender and experiential factors (technology savviness and professional experience), to phishing attack susceptibility.
Phishing website, английский
A web site that impersonates a trustworthy web site to obtain user’s personal or financial information. phone (n)
Spear, английский
- Squadron performance effectiveness analytic
- One of several types of fishing tools designed to be driven and wedged inside of bits, rods, etc., lost in a borehole. compare fishing tap.
- A rodlike fishing tool having a barbed-hook end, used to recover rope, wire line, and other materials from a borehole.
Spear pyrite, английский
Spear side, английский
Мужская линия родства spe – spi
Spear, lance, английский
Speargun, английский
Spearhead, английский
A conical head on a wire-line core barrel, engaged by the dogs on the overshot assembly for the purpose of removing the inner tube of the core barrel from a borehole.
Spearman, английский
Spearman`s rank correlation, английский
Probability, английский
- Probability can be generally defined as a measure of how likely some event will occur. the event could be an explosion, a lottery win or perhaps cancer induction. mathematically speaking, the value of probability varies between 0 and 1 where 0 means an ev
- Вероятность. возможность.
- The probability of an event is a number between zero and 100%. the meaning (interpretation) of probability is the subject of theories of probability, which differ in their interpretations. however, any rule for assigning probabilities to events has to satisfy the axioms of probability.
- Вероятность
- Вероятность probability sample, syn. random sample
- Вероятность. мера случайности появления конкретного события. например, вероятность случайного выбора из популяции человека с конкретным качеством соответствует доле людей в популяции, обладающих этим качеством.
- Вероятность; возможность
- Вероятность; обеспеченность (гидрологической величины) ~ of no-failure вероятность безотказной работы
- Probability is a method for representing uncertainty about propositions or events. it represents the uncertainty about a proposition on a scale from 0 to 1, with a 0 representing complete certainty that the proposition is false or an event will not occur and a value of one will represent the opposite. formally, a probability measure is one that follows kolmogorov`s axioms. there are two main schools of thought on the meaning of probability. frequentists take a narrow interpretation of probability allowing only hypothetically repeatable events or experiments as being quantifiable by probability, while bayesians take a broader interpretation that allows reasoning about "one-shot" events and propositions based on the current knowledge about nature. the bayesian interpretation is most commonly used in artificial intelligence, while the frequentist interpretation is most commonly taught in statistics courses. the label "bayesian" arises from the central role that the bayes theorem plays in this use of probability. it allows one to reason from effects to causes and encourages the use of probability measures to describe supposedly fixed events or propositions which frequentists disallow. the probability for these events reflects one`s state of knowledge about the event, rather than being an assertion that the unknown event can vary. for example, a bayesian would have no qualms about making statements about the probability that a given die, rolled and hidden from his sight is, for example, a six. a frequentist would be unable to make such a statement, preferring to talk about his confidence in the method when applied to a hypothetically large number of repeated experiments. in the end, they would act in similar ways. when the long run data are available, bayesians and frequentists end up with the same estimates. see also: bayes theorem, kolmogorov`s axioms.
- Вероятность. математическое измерение возможности появления неко-его события, выраженное в виде дроби или процента [30]. значения статистической вероятности лежат в пределах от 1 или 100 процентов (всегда) до 0 или 0 процентов (никогда) [20]. наибольшее приближение к истинной вероятности дает относитель-ная частота события, полученная на основе большой серии измерений или результа-тов [33]. вероятность может быть также определена как выражение в некоторой неопределимой форме "степени уверенности" или как предельная частота события в бесконечной случайной последовательности [49].
- The likelihood of something happening. for example, sale being made.
- Вероятность. математическое измерение возможности появления некоего события, выраженное в виде дроби или процента [30]. значения статистической вероятности лежат в пределах от 1 или 100 процентов (всегда) до 0 или 0 процентов (никогда) [20]. наибольшее приближение к истинной вероятности дает относительная частота события, полученная на основе большой серии измерений или результатов [33]. вероятность может быть также определена как выражение в некоторой неопределимой форме "степени уверенности" или как предельная частота события в бесконечной случайной последовательности [49].
- The relative likelihood of a particular outcome among all possible outcomes.
- Likelihood that an event may occur, expressed as a number between 0 and 1.
|
Steganography, английский
The practice of concealing a file within another one. for example, a social engineer might hide a malicious executable inside a jpeg file, which he then emails to his victim. upon clicking a seemingly benign photo, a malicious trojan then gets activated which communicates back to the attacker’s command and control centre. this makes steganography a useful technique for data exfiltration or credential harvesting. steganographic techniques can also be used by rogue employees to exfiltrate data out of an organisation by hiding confidential files, e.g. customer database files that are hidden amongst graphic design files.
Spam filter, английский
The job of a spam filter is to prevent spam or malicious emails from reaching your email inbox. most spam filters rely on a mixture of artificial intelligence, heuristics and natural language processing to classify emails. however, this can only partially mitigate the risk of social engineering emails reaching their intended targets as there will always be emails that slip under the radar of even the most advanced filters. moreover, even if a phishing email does get categorised as “spam”, it is still at risk of being opened. this happened in the infamous rsa attack of 2011 when an employee retrieved a phishing email in their spam folder and opened it, which resulted in a significant data breach.
|
|
|
|
|
|
|
