WEBVTT

00:00.530 --> 00:07.070
Now if you look up social engineering in Wikipedia it says social engineering in the context of information

00:07.070 --> 00:13.130
security which is what we're interested in refers to psychological manipulation of people into performing

00:13.130 --> 00:16.220
actions or divulging confidential information.

00:17.080 --> 00:24.100
I'm not saying that's inaccurate but to me social engineering simply means people tricking people one

00:24.100 --> 00:25.440
way or another.

00:25.450 --> 00:29.870
Now social engineering always surprises me because you know we're smart people you know.

00:30.070 --> 00:31.750
We've been around the block a little bit.

00:31.930 --> 00:34.770
So how does it happen that time after time.

00:34.900 --> 00:42.490
Smart people figure out how to get passwords access information key codes all kinds of stuff like that

00:42.790 --> 00:45.100
out of otherwise smart people.

00:45.100 --> 00:49.560
Well it boils down to what we call the social engineering principles.

00:49.570 --> 00:54.790
These are the aspects of human nature that make social engineering effective.

00:54.790 --> 00:56.150
So I want to run through all these.

00:56.200 --> 01:02.220
And let's start with authority authority to impersonate or imply a position of authority.

01:02.230 --> 01:07.240
I'm calling from the CEOs office intimidation to frighten by threat.

01:07.240 --> 01:09.080
Do I need to talk to your supervisor.

01:09.130 --> 01:12.580
Consensus to convince general group agreement.

01:12.580 --> 01:17.310
Bob does that mean all the time scarcity to describe a lack of something.

01:17.350 --> 01:20.550
These aren't available anywhere else.

01:20.590 --> 01:24.430
Familiarity to imply a closer relationship.

01:24.490 --> 01:32.630
Didn't we meet at the Holiday Party trust to assure reliance on their honesty and integrity.

01:32.750 --> 01:36.060
Anyone here in the I.T. Department can handle that task.

01:36.140 --> 01:39.340
Urgency to call for immediate action.

01:39.380 --> 01:42.370
The web server is about to go down.

01:42.620 --> 01:44.200
Now for the exam.

01:44.270 --> 01:48.600
Take the time to memorize these different social engineering principles.

01:48.740 --> 01:51.520
You're going to be seen lots of questions that discuss these.

01:51.560 --> 01:54.350
Make sure you're comfortable with them and what they imply.