|
|
|
|
|
|
|
|
|
Business email compromise (bec)
| Глоссарий терминов по социальной инженерии и информационной безопасности |
A type of social engineering attack in which one party of a financial transaction gets impersonated. for example, in the buying or selling of a house, an attacker may impersonate the real estate agent or solicitor by using a compromised or spoofed email account, and then socially engineer the buyer to redirect funds to their own bank account during the final stages of the transaction. see also ceo fraud.
|
Ceo fraud, английский
A type of business email compromise in which the attacker purports to be the ceo, and uses a compromised or spoofed email address to make a payment request to an employee with the authority to issue payments. the receiving bank account is usually owned or connected to the attacker. this attack preys on the human inclination to follow a chain of command and usually involves the attacker adding some urgency to the request. victims of this scam include meath county council, who lost ?4.3 million when one of their finance team received a fraudulent payment request from an attacker who claimed to be the ceo. the risk posed by ceo fraud can be mitigated by training executive staff, their assistants and those working in finance functions to identify the tell-tale signs of such an attack and how to mitigate it.
|
Engineering, английский
- Инжиниринг. техническая разработка проектов, составление смет, иногда также включает финансовое и экологическое обоснование проектов. так же деятельность по оказанию услуг в этой области
- Техника, инженерное дело
- Машиностроение; техника
- Американское сантехническое общество
- Инжиниринг. техническая разработка проектов, составление смет, иногда также включает в себя финансовое и экологическое обоснова- ние проектов. также деятельность по оказанию услуг в этой области.
- Инженерия
Transaction, английский
- Любое событие в результате которого происходит изменение финансовой позиции организации в ходе её обычной работы. примером транзакции является осуществление покупки с помощью кредитной карты.
- (транзакция) соглашение между покупателем и продавцом, для продажи актива;
- Операция открытия/закрытия позиции.
- Экономическая операция (в снс; элементарный акт хозяйственной деятельности, совершаемый между хозяйственными единицами: производство, капиталовложения, потребление и др.; операции могут быть односторонними и двусторонними, капитальными и текущими, товарными и нетоварными, фактическими и условными, расчетными)
- A transaction is a digitally signed message authorizing some particular action associated with the blockchain. in a currency, the dominant transaction type is sending currency units or tokens to someone else; in other systems actions like registering domain names, making and fulfilling trade offers and entering into contracts are also valid transaction types.
- A data manipulation action processed by a database.
- A physical economic exchange action.
- A social economic exchange action.
- An event or condition that is recorded in asset, liability, expense, revenue, and/or equity accounts. sales to customers or purchases from vendors are examples of transactions.
- The pairing of two or more actions that are performed together as a single action; the action succeeds or fails as a whole.
- The posting or registration of a change on a document or a journal line.
- The delivery of a security by a seller and its acceptance by the buyer.
- Операция
- Language use to achieve ends rather than maintain social relationships.
- Information that entrance transfers to another computer system, either directly (via dll or other interface) or by saving it in a transfer file.
Impersonate, английский
Compromised, английский
|
Business process compromise (bpc), английский
A form of attack where business processes or their underlying systems have been manipulated by an attacker. for example, starting from 2011, the belgian port of antwerp was infiltrated by hackers acting on behalf of drug traffickers. shipping containers were disappearing off their computer systems for no apparent reason. it took the port authority almost two years to discover that hackers were “inside” their it systems manipulating them. bpc causes financial loss and can severely disrupt operations.
Baselining, английский
Monitoring resource usage (such as email usage) to determine typical usage patterns so that significant deviations can be detected.
|
|
|
|
|
|
|
