Glossary · Intelligence · Legal

Social engineering

Intelligence · Legal

Social engineering refers to a set of methods that attackers use to manipulate people with the aim of obtaining confidential information or access to systems.

Social engineering refers to a set of methods that attackers use to manipulate people with the aim of obtaining confidential information or access to systems.

Instead of exploiting vulnerabilities in software or hardware, social engineering focuses on exploiting human weaknesses, such as trust, fear or curiosity. For example, an attacker could make a phone call posing as a support technician to persuade an employee to reveal her password.

With the rise of social media, social engineering has become even more powerful, as attackers can collect large amounts of personal information and use it to design more convincing and personalized attacks. The most effective defense against social engineering is user education and awareness of common tactics and the importance of verification.

Related terms SWOT analysis SWOT Analysis is a strategic framework used to evaluate the position of an organization, project, product, or initiative through the structured assessment of four key dimensions: strengths, weaknesses, opportunities, and threats. Technology surveillance Technology surveillance is the systematic process of identifying, monitoring and analyzing information about the latest technologies, research and developments in a specific field. Analytics Analytics is the set of methods, techniques and processes used to collect, cleanse, interpret and transform data into actionable knowledge that supports operational and strategic decision-making. Benchmarking Benchmarking is a systematic comparative analysis methodology that enables organizations to evaluate their processes, products, services, or results against int…