You are here: silicon.com > Software > Security Strategy

Security Strategy

Security pundits warn on mind tricks

Users "need to be taught" to spot social engineering attacks

Tags: social engineering

By Tom Espiner

Published: 27 June 2007 08:58 GMT

Security firm McAfee has said that cybercriminals are using increasingly sophisticated social-engineering techniques and that IT managers need to make users aware of the psychological tricks that make the techniques work.

The vendor worked with University of Leicester forensic psychologist Professor Clive Hollin to analyse why users fall for online scams.

According to Hollin, the first part of the process is persuading the user that an email comes from a respectable source. People tend to respond to authority - for example, a lawyer - but will also respond to endorsements from trusted sources, as well as familiarity and banter.

Once trust has been gained, fraudsters attempt to get users to click on a link which takes them to malicious websites by either threatening an unwanted event, such as legal action, or by offering a reward, such as a commodity for a bargain price, said Hollin.

Users who fall for scams are not necessarily technophobes or the innocent, said the psychologist. Risk-takers might be fooled by the prospect of high gain, while the tech-savvy might be vulnerable due to over-confidence.

Hollin said: "Given the right conditions in terms of the persuasiveness of the communication and the critical combination of situational and personal factors, most people may be vulnerable to misleading information. This point is true both for experienced and inexperienced computer users; while naivety may be a partial explanation, even sophisticated users can be deceived and become suggestible to misleading messages."

Tom Espiner writes for ZDNet UK

  1. Zones
  2. Management
  3. Networks
  4. Software
  5. IT Services
  6. Hardware
  1. Verticals
  2. Public Sector
  3. Financial Services
  4. Retail & Leisure

Clive Longbottom Windows 7: Not perfect - but ready for prime time Microsoft's latest OS fixes most of Vista's ills - but still has challenges ahead

Stephen Kleynhans Mind the details with Windows 7 Just because it might work better than Vista, it doesn't mean you can be sloppy


  • Jobs
EXECUTIVE - PRODUCT MANAGEMENT(GENERAL MANAGER - MI - SPECT)

Bachelors Degree in Business, Marketing, Engineering or related discipline, and 10+ years of progressive business or commercial experience.In the ...

Commissioning Market Analyst - London

You will be engaging with the local authority to analyse the NHS and non-NHS health provider landscape and to produce a comprehensive report of the ...

Lead Business Analyst (to 55k + bonus)

Good level of political awareness, savvy and capability. A good level of personal gravitas; good level of credibility in front of customers, clients ...

Agenda Setters 2009
Welcome to the ninth annual Agenda Setters poll – silicon.com's list of the top 50 most influential individuals in the technology and IT industries, from techies and CIOs to entrepreneurs and business leaders. Find out more in our latest special report.





Quick Sitemap Links: