|
|
|
|
|
|
|
|
|
Программные криптографические средства
| Словарь в сфере информационной безопасности |
|
Software cryptographic mechanisms, английский
|
|
Software cryptographic mechanisms, английский
Social engineering, английский
- The practice of penetrating system security by tricking individuals into divulging passwords and information about network vulnerabilities. often done by calling the individual on phone and pretending to be another employee of company with a computer-related question.
- A collection of techniques that use human vulnerabilities to manipulate people into performing actions or divulging sensitive information. many hackers have realised that instead of trying to penetrate technical defences, it is sometimes easier to use good old-fashioned manipulation techniques to install a trojan on a pc or find out a user’s password.this might involve sending the target an email purporting to be from someone else (phishing) and using emotions, such as fear or a sense of urgency, to persuade them to reveal information or download a malicious file. some of the biggest data breaches in history have used social engineering. for example, one of the world’s largest it security companies, rsa, got hacked in 2011 by an employee who opened a malware-laden excel spreadsheet sent through email. just by this simple action, the unfortunate employee ended up compromising the company’s entire it network and rsa were forced to redistribute 40 million secureid tokens (one of their flagship products) to their customers. each year, thousands of computer users in ireland get duped by emails purporting to be from the revenue commissioners, financial institutions, suppliers and colleagues or friends who`ve had their own email accounts hijacked.this has resulted in both financial and data losses due to systems being maliciously encrypted or wiped. ironically, the users who claim immunity from such “obvious scams” are the very ones who get duped, as they often underestimate the sophistication of the techniques used. social engineering continues to be a potent attack vector that sidesteps even the most robust technological defenses.
|
|
|
|
|
|
|
