Engenharia social: o vínculo mais frágil da segurança

Abstract

It is a fact that organizations have invested in the progress of their technology parks, but they are absent on the human factor. Social engineering, as its name suggests, seeks a form of appropriation in a simple and effective way, using the most vulnerable information system possible, the human being. It consists of practices carried out to obtain confidential information from systems, companies or ordinary people; such as passwords, using your target's confidence to do so. This is its most prestigious form of action. Social engineering is evidenced, daily, in society, due to the overexposure of personal or professional information, mainly in social networks. It should be noted that the attacks carried out by social engineering do not have a defined formula or method, as they can take advantage of physical, online or psychological attacks. In the first, they inquire about the place of work or home, break down trash bins, and, by telephone, impersonate another person, either through calls or through messaging applications. In online use techniques and software, which through the internet can help you gather information. Finally, in psychological attacks, they inquire into the emotional side of potential targets. This article extended a qualitative study, and its purpose is an exploratory research on the Social Engineering theme, mainly regarding the attacks coming from technology; it makes life easier for everyone, but if used properly.