User education essential against social engineering attacks
Posted on 22 June 2012.
The five-year analysis of data from Google’s Safe Browsing service shows that the threat landscape of today has evolved considerably from that of just five years ago, according to Grant Taylor, UK VP of Cryptzone.

“What has happened in the intervening period is that the Internet has become a lot more social - and, with it, has come a communications revolution with both business and consumer users of the Web interacting with each other as never before. This has significantly raised the threat profile of almost every user as a consequence,” he said.

“In parallel with this, security vendors have developed more sophisticated technologies to stop cybercriminals - and just plain mischievous - attacks, making the task of executing technical exploits by hackers a lot more difficult,” Taylor added.

As a result of these trends, social engineering has become more prevalent. Social networking attack-driven threats have gone through the roof in direct response to the surge in the take-up of social networking sites and services, especially within the last two years.

The problem with the trend of rising levels of social engineering is that it primarily exploits human weaknesses, so is almost impossible to prevent using technical controls. In the IT security industry we obsess about data protection, but the reality is that many employees remain completely unaware of the value of the information they work with from day to day.

As a result they become complacent about protecting it. User education backed up by well communicated policies and procedures - is the best way to help people understand the security implications of their actions.

“Only by raising user awareness to the potential threats and keeping people permanently on their toes to identify when they are being manipulated to reveal confidential information - or provide a piece of the security puzzle for data thieves to steal valuable corporate assets – can we hope to counter this social phenomenon,” he said.





Spotlight

Hackers indicted for stealing Apache helicopter training software

Posted on 1 October 2014.  |  Members of a computer hacking ring have been charged with breaking into computer networks of prominent technology companies and the US Army and stealing more than $100 million in intellectual property and other proprietary data.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  

DON'T
MISS

Wed, Oct 1st
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //