Social Engineering for Security Attacks - تاریخچهٔ نسخه‌ها

Masoudkhademy: /* مراجع */

2017-01-13T22:43:49Z

مراجع

→ نسخهٔ قدیمی‌تر		نسخهٔ ‏۱۴ ژانویهٔ ۲۰۱۷، ساعت ۰۳:۱۳
خط ۱۱۴:		خط ۱۱۴:

	6 Y. Rossikova, J, J. Li and P. Morreale, "Intelligent Data Mining for Translator Correctness Prediction", CloudSecurity2016, Columbia unviersity NYC, April 2016.		6 Y. Rossikova, J, J. Li and P. Morreale, "Intelligent Data Mining for Translator Correctness Prediction", CloudSecurity2016, Columbia unviersity NYC, April 2016.
	~~Anderson, Ross J. (2008). Security engineering: a guide to building dependable distributed systems (2nd ed.). Indianapolis, IN: Wiley. p. 1040. ISBN 978-0-470-06852-6. Chapter 2, page 17~~
	Jump up ^ Jaco, K: "CSEPS Course Workbook" (2004), unit 3, Jaco Security Publishing.		Jump up ^ Jaco, K: "CSEPS Course Workbook" (2004), unit 3, Jaco Security Publishing.
	Jump up ^ "Hack a Facebook Account with Social Engineering (Easiest Way) ~ Amazing Hacking Tricks". amazinghackingtricks.com.		Jump up ^ "Hack a Facebook Account with Social Engineering (Easiest Way) ~ Amazing Hacking Tricks". amazinghackingtricks.com.

Masoudkhademy: /* مراجع = */

2017-01-13T18:05:46Z

مراجع =

→ نسخهٔ قدیمی‌تر		نسخهٔ ‏۱۳ ژانویهٔ ۲۰۱۷، ساعت ۲۲:۳۵
خط ۱۰۱:		خط ۱۰۱:
	Social engineering will always be around. As long as you are willing to have a healthy level of paranoia and good common sense, you do not need to fear them.		Social engineering will always be around. As long as you are willing to have a healthy level of paranoia and good common sense, you do not need to fear them.

	== مراجع ===		== مراجع ==

	1 How difficult is it to carry out an APT attack? (n.d.). Retrieved May 07, 2014, from http://www.cbronline.com/news/cybersecurity/data/how-difficult-it-is-to-carry-out-an-atp-attack-4261415.		1 How difficult is it to carry out an APT attack? (n.d.). Retrieved May 07, 2014, from http://www.cbronline.com/news/cybersecurity/data/how-difficult-it-is-to-carry-out-an-atp-attack-4261415.

Masoudkhademy: /* بدنه تحقیق */

2016-12-31T21:24:50Z

بدنه تحقیق

→ نسخهٔ قدیمی‌تر		نسخهٔ ‏۱ ژانویهٔ ۲۰۱۷، ساعت ۰۱:۵۴
خط ۲۸:		خط ۲۸:
	== بدنه تحقیق ==		== بدنه تحقیق ==
	http://wiki.occc.ir/images/Pic88988.jpg		http://wiki.occc.ir/images/Pic88988.jpg

	http://wiki.occc.ir/images/Pi898655.jpg		http://wiki.occc.ir/images/Pi898655.jpg

	Techniques and terms		Techniques and terms
	All social engineering techniques are based on specific attributes of human decision-making known as cognitive biases. These biases, sometimes called "bugs in the human hardware", are exploited in various combinations to create attack techniques, some of which are listed. The attacks used in social engineering can be used to steal employees' confidential information. The most common type of social engineering happens over the phone. Other examples of social engineering attacks are criminals posing as exterminators, fire marshals and technicians to go unnoticed as they steal company secrets.		All social engineering techniques are based on specific attributes of human decision-making known as cognitive biases. These biases, sometimes called "bugs in the human hardware", are exploited in various combinations to create attack techniques, some of which are listed. The attacks used in social engineering can be used to steal employees' confidential information. The most common type of social engineering happens over the phone. Other examples of social engineering attacks are criminals posing as exterminators, fire marshals and technicians to go unnoticed as they steal company secrets.

Masoudkhademy: /* بدنه تحقیق */

2016-12-31T21:24:13Z

بدنه تحقیق

→ نسخهٔ قدیمی‌تر		نسخهٔ ‏۱ ژانویهٔ ۲۰۱۷، ساعت ۰۱:۵۴
خط ۲۸:		خط ۲۸:
	== بدنه تحقیق ==		== بدنه تحقیق ==
	http://wiki.occc.ir/images/Pic88988.jpg		http://wiki.occc.ir/images/Pic88988.jpg

	http://wiki.occc.ir/images/Pi898655.jpg		http://wiki.occc.ir/images/Pi898655.jpg

Masoudkhademy: /* بدنه تحقیق */

2016-12-31T21:08:26Z

بدنه تحقیق

→ نسخهٔ قدیمی‌تر		نسخهٔ ‏۱ ژانویهٔ ۲۰۱۷، ساعت ۰۱:۳۸
خط ۲۷:		خط ۲۷:

	== بدنه تحقیق ==		== بدنه تحقیق ==
	http://wiki.occc.ir/images/~~%D8%AA%D8%AC%D8%A7%D8%B1%D8%AA_%D8%A7%D9%84%DA%A9%D8%AA%D8%B1%D9%88%D9%86%DB%8C%DA%A9~~.jpg		http://wiki.occc.ir/images/Pic88988.jpg
	http://wiki.occc.ir/images/~~Book1~~.jpg		http://wiki.occc.ir/images/Pi898655.jpg

	Techniques and terms		Techniques and terms

Masoudkhademy: /* بدنه تحقیق */

2016-12-31T21:05:21Z

بدنه تحقیق

→ نسخهٔ قدیمی‌تر		نسخهٔ ‏۱ ژانویهٔ ۲۰۱۷، ساعت ۰۱:۳۵
خط ۲۷:		خط ۲۷:

	== بدنه تحقیق ==		== بدنه تحقیق ==
			http://wiki.occc.ir/images/%D8%AA%D8%AC%D8%A7%D8%B1%D8%AA_%D8%A7%D9%84%DA%A9%D8%AA%D8%B1%D9%88%D9%86%DB%8C%DA%A9.jpg
			http://wiki.occc.ir/images/Book1.jpg

	Techniques and terms		Techniques and terms

Masoudkhademy: /* بدنه تحقیق */

2016-12-31T21:04:21Z

بدنه تحقیق

→ نسخهٔ قدیمی‌تر		نسخهٔ ‏۱ ژانویهٔ ۲۰۱۷، ساعت ۰۱:۳۴
خط ۹۰:		خط ۹۰:
	Using a waste management service that has dumpsters with locks on them, with keys to them limited only to the waste management company and the cleaning staff. Locating the dumpster either in view of employees so that trying to access it carries a risk of being seen or caught, or behind a locked gate or fence where the person must trespass before they can attempt to access the dumpster.]		Using a waste management service that has dumpsters with locks on them, with keys to them limited only to the waste management company and the cleaning staff. Locating the dumpster either in view of employees so that trying to access it carries a risk of being seen or caught, or behind a locked gate or fence where the person must trespass before they can attempt to access the dumpster.]

	~~--[[کاربر:Masoudkhademy\|Masoudkhademy]] ([[بحث کاربر:Masoudkhademy\|بحث]]) ‏۳۱ دسامبر ۲۰۱۶، ساعت ۲۱:۰۱ (UTC)~~== نتیجه گیری ==		== نتیجه گیری ==
	These are just a few of many techniques used by social engineers. Some of these involve technology (e.g., spear phishing) while others use tried and true methods of human manipulation (such as NLP). Social engineers use these tactics for a multitude of reasons, ranging from obtaining bank account numbers to acquiring trade secrets to sell to competitors.		These are just a few of many techniques used by social engineers. Some of these involve technology (e.g., spear phishing) while others use tried and true methods of human manipulation (such as NLP). Social engineers use these tactics for a multitude of reasons, ranging from obtaining bank account numbers to acquiring trade secrets to sell to competitors.

Masoudkhademy: /* بدنه تحقیق */

2016-12-31T21:03:40Z

بدنه تحقیق

→ نسخهٔ قدیمی‌تر		نسخهٔ ‏۱ ژانویهٔ ۲۰۱۷، ساعت ۰۱:۳۳
خط ۹۹:		خط ۹۹:
	Finally, employ the principle of need-to-know. The need-to-know principle states that employees should only be given enough information to do their job. They should not be given information about other departments or about decisions made at higher levels that do not relate to their work. This way, should a social engineer try to get information out of them, they would have limited information that they could reveal.		Finally, employ the principle of need-to-know. The need-to-know principle states that employees should only be given enough information to do their job. They should not be given information about other departments or about decisions made at higher levels that do not relate to their work. This way, should a social engineer try to get information out of them, they would have limited information that they could reveal.
	Social engineering will always be around. As long as you are willing to have a healthy level of paranoia and good common sense, you do not need to fear them.		Social engineering will always be around. As long as you are willing to have a healthy level of paranoia and good common sense, you do not need to fear them.
	~~#تغییر_مسیر [[~~
	~~#تغییر_مسیر [[نام صفحه مقصد]]~~
	~~#تغییر_مسیر [[نام صفحه مقصد]]~~
	]]

	== مراجع ===		== مراجع ===

Masoudkhademy: /* نتیجه گیری */

2016-12-31T21:01:29Z

نتیجه گیری

→ نسخهٔ قدیمی‌تر		نسخهٔ ‏۱ ژانویهٔ ۲۰۱۷، ساعت ۰۱:۳۱
خط ۹۰:		خط ۹۰:
	Using a waste management service that has dumpsters with locks on them, with keys to them limited only to the waste management company and the cleaning staff. Locating the dumpster either in view of employees so that trying to access it carries a risk of being seen or caught, or behind a locked gate or fence where the person must trespass before they can attempt to access the dumpster.]		Using a waste management service that has dumpsters with locks on them, with keys to them limited only to the waste management company and the cleaning staff. Locating the dumpster either in view of employees so that trying to access it carries a risk of being seen or caught, or behind a locked gate or fence where the person must trespass before they can attempt to access the dumpster.]

	== نتیجه گیری ==		--[[کاربر:Masoudkhademy\|Masoudkhademy]] ([[بحث کاربر:Masoudkhademy\|بحث]]) ‏۳۱ دسامبر ۲۰۱۶، ساعت ۲۱:۰۱ (UTC)== نتیجه گیری ==
	~~Conclusion~~
	These are just a few of many techniques used by social engineers. Some of these involve technology (e.g., spear phishing) while others use tried and true methods of human manipulation (such as NLP). Social engineers use these tactics for a multitude of reasons, ranging from obtaining bank account numbers to acquiring trade secrets to sell to competitors.		These are just a few of many techniques used by social engineers. Some of these involve technology (e.g., spear phishing) while others use tried and true methods of human manipulation (such as NLP). Social engineers use these tactics for a multitude of reasons, ranging from obtaining bank account numbers to acquiring trade secrets to sell to competitors.

خط ۱۰۰:		خط ۹۹:
	Finally, employ the principle of need-to-know. The need-to-know principle states that employees should only be given enough information to do their job. They should not be given information about other departments or about decisions made at higher levels that do not relate to their work. This way, should a social engineer try to get information out of them, they would have limited information that they could reveal.		Finally, employ the principle of need-to-know. The need-to-know principle states that employees should only be given enough information to do their job. They should not be given information about other departments or about decisions made at higher levels that do not relate to their work. This way, should a social engineer try to get information out of them, they would have limited information that they could reveal.
	Social engineering will always be around. As long as you are willing to have a healthy level of paranoia and good common sense, you do not need to fear them.		Social engineering will always be around. As long as you are willing to have a healthy level of paranoia and good common sense, you do not need to fear them.
			#تغییر_مسیر [[
			#تغییر_مسیر [[نام صفحه مقصد]]
			#تغییر_مسیر [[نام صفحه مقصد]]
			]]

	== مراجع ===		== مراجع ===

Masoudkhademy: /* نتیجه گیری */

2016-12-31T21:00:06Z

نتیجه گیری

→ نسخهٔ قدیمی‌تر		نسخهٔ ‏۱ ژانویهٔ ۲۰۱۷، ساعت ۰۱:۳۰
خط ۹۱:		خط ۹۱:

	== نتیجه گیری ==		== نتیجه گیری ==
			Conclusion
			These are just a few of many techniques used by social engineers. Some of these involve technology (e.g., spear phishing) while others use tried and true methods of human manipulation (such as NLP). Social engineers use these tactics for a multitude of reasons, ranging from obtaining bank account numbers to acquiring trade secrets to sell to competitors.

			If you are concerned about social engineers targeting people in your organization, you can take some steps to help thwart these attacks:

			First, employees should be regularly trained in how to look out for suspicious people, e-mails, and phone calls.
			Second, train employees in what I like to call G.O.C.S. security—Good Old Common Sense security. In other words, some people just need to be taught some street smarts. I have seen companies do this by spelling out in their corporate security policy the dangers of using social networking sites and of drinking and discussing work topics with strangers (of course, this is only effective if employees actually read the policies which, as we all, is wishful thinking).
			Finally, employ the principle of need-to-know. The need-to-know principle states that employees should only be given enough information to do their job. They should not be given information about other departments or about decisions made at higher levels that do not relate to their work. This way, should a social engineer try to get information out of them, they would have limited information that they could reveal.
			Social engineering will always be around. As long as you are willing to have a healthy level of paranoia and good common sense, you do not need to fear them.

	== مراجع ===		== مراجع ===