Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

How can I understand if I am being targeted by a grey hat social engineer?

And if I fail, what approaches exist to detect social engineering attacks being in progress within an organisation?

share|improve this question
    
+1 for the question, to which i'd add : is there some good source (website or books) showing examples of social engineering (not only the famous ones, but many examples and from diverse persons and companies) ? –  Olivier Dulac Aug 23 '13 at 13:17
2  
@OlivierDulac, Love him or hate him, Kevin Mitnick has written a fantastic book on Social Engineering called the Art of Deception. It outlines successful attacks, why they were successful and what could have been done to mitigate them –  DKNUCKLES Aug 23 '13 at 13:26
    
Human sensors are helpful. –  Steel City Hacker Aug 23 '13 at 14:31
add comment

1 Answer

up vote 3 down vote accepted

The reason that social engineering is as successful and popular as it is, is because there is no "catch all" approach to identifying a social engineer attack.

Approaches to identify social engineering attacks within an organization, typically (in my experience) involve getting the attacker to try to identify things that only a legitimate caller would know (security questions). It's debatable how secure this approach is, however it's still widely employed and used by many companies. Technologies like two factor authentication can help as well, but again these technologies rely on not having a "weak" human that can over-ride their processes.

Social Engineers will attempt to play off your emotions as a human. Most humans have a distinct nature in wanting to help those who need help, so it's common for social engineer experts to create a scenario whereby you pity them and may circumvent proper security procedures to help them. Another tactic is to get very angry and irate at someone in hopes that they'll provide the attacker what they want because most humans don't like being yelled at, and many don't like any sort of confrontation.

Perhaps the worst part is, if an attacker has done their research and knows their lingo and security questions of their would-be victim, you'd probably have no idea you had been socially engineered. Many companies have staff follow security procedures but if an attacker knows those procedures and has figured out a way to circumvent them, you'll likely find yourself out of luck

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.