Whitepaper. Social engineering: Exploiting the weakest links

Social engineering, as defined by the European Network for Information Security (ENISA) in this White Paper, is 'techniques that exploit human weaknesses and manipulate people into breaking normal security procedures'. It might include on-line manipulation through social networks, email, advance-fee frauds, instant messaging, or Voice Over Internet Protocols (VoIP). In its Paper, the Agency provides three case studies portraying how easy users are manipulated, identifies five defence measures and issues a check list for users to counter social engineering.

• Primary Source

European Network and Information Security Agency: Press Release, 3.10.08: How to avoid on-line manipulation http://www.enisa.europa.eu/pages/02_01_press_2008_10_03_social_engineering.html

---