Social engineering tactics can be the most difficult ones to defend against, but our experts give you the advice and tools you need to protect your users.
Thwarting Hacker Techniques LEARNING GUIDE - This guide provides you with a plethora of tips, expert advice and Web resources that offer more in-depth information about hacker techniques and various tactics you can employ to protect your network.
Combining technology and social engineering: Hacking behind bars REPRINT - In this excerpt from Chapter 11 of "The Art of Deception: Controlling the Human Element of Security," authors Kevin Mitnick and William L. Simon begin a story that shows how social engineering can be used with technology.
NEWS:1 - 3 of 21
Stolen data ending up in Google cache, say researchers
SearchSecurity.com | 30 May 2008 ARTICLE - Unprotected hacker drop sites are being crawled by search engines. Passwords, Social Security numbers and sensitive business information can be uncovered with a simple search.
How Russia became a malware hornet's nest
SearchSecurity.com | 09 Oct 2007 ARTICLE - Security experts Eugene Kaspersky and Gadi Evron explain how the Russian economy and lax police work helped make it a malware hotbed.
RSA Conference: Children must learn about cyber risks
SearchSecurity.com | 13 Feb 2007 ARTICLE - A security expert at RSA Conference 2007 said children must learn about the dangers of cyberspace, just as they are taught about the dangers of drugs and alcohol.
Ed Skoudis Founder and Senior Security Consultant with Intelguardians ASK A QUESTION
Countermeasures against targeted attacks in the enterprise
12 Jun 2008 TIP - In this tip, Markus Jakobsson details the ills of social data mining and how technology can help thwart attacks that seek to exploit trusted relationships.
What kind of data is compromised during a Google hack?
02 Apr 2008 EXPERT ANSWER - Ed Skoudis defines Google hacking, unveils the type of data that is most commonly exposed during this type of attack and offers ways to ward off Google hackers.
Should social engineering tests be included in penetration testing?
02 Apr 2008 EXPERT ANSWER - Information security threats expert Ed Skoudis weighs the positive and negative aspects of allowing social engineering tests to be a part of the penetration testing process.
Quiz: Anatomy of an attack
SearchSecurity.com | 11 Jun 2008 QUIZ - Take this five-question quiz and test your knowledge of social-engineering and data-mining attacks.
Information security book excerpts and reviews
SearchSecurity.com | 22 May 2008 INFORMATION SECURITY BOOKSHELF - Visit the Information Security Bookshelf for book reviews and free chapter downloads.
Threats to physical security
By Dan Sullivan, Realtimepublishers | 26 Jan 2007 BOOK CHAPTER - The sixth tip in our series, "How to assess and mitigate information security threats".
MAGAZINE CONTENT (free subscription required):1 - 1 of 1
Secure Reads
Information Security Magazine | 31 Aug 2005 HOT PICK & PRODUCT REVIEWS - Silence on the Wire: A Field Guide to Passive Reconnaissance and Indirect Attacks
shoulder surfing
14 Feb 2002 WORD - Shoulder surfing is using direct observation techniques, such as looking over someone's shoulder, to get
information. Shoulder surfing is an effective way to get information in crowded places because it's relatively easy to ...
dumpster diving
14 Feb 2002 WORD - Dumpster diving is looking for treasure in someone else's trash. (A dumpster is a large trash container.) In the world of information technology, dumpster diving is a technique used
to retrieve information that could be ...
social engineering
21 Apr 2004 WORD - In computer security, social engineering is a term that describes a non-technical kind of intrusion that
relies heavily on human interaction and often involves tricking other people to break normal security procedures. A ...
TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.
