SOCIAL ENGINEERING
Social engineering goes mobile
August Schellhase
Identity thieves began their scam the old-fashioned way, stealing credit card statements, new bank checks and other documents from mailboxes in neighborhoods of all types. But along came the Internet, cell phones and a plethora of other high tech gadgets and their operation took a high-tech turn that confirmed what law enforcement authorities and privacy specialists have known since the beginning of time: Criminal groups, like legitimate businesses, are using the advances of technology to make a profit.
It seems a day doesn’t go by without another news story about a breach of sensitive data at a government agency, educational institution or well-known corporation. Laptops are walking away. Social engineers are targeting employees. Careless workers and contractors are inadvertently exposing secrets. As we read these stories of doom and gloom let’s not be sidetracked and focus on the negative or surly we will gravitate in that direction. Let’s look instead at what is working and how we can constantly improve to ensure that we stay ahead of the competition and the criminals.
So you ask, “What’s in it for me?” No matter what your job is, what title you have or don’t have, you as an individual are a leader that can effect change and ensure that we are protecting our sensitive information. By focusing on what can be done to consistently improve our security posture, making suggestions which many have done and following security procedures, you will be doing your part in protecting national security.