The Weakest Link: Social Engineering

To demonstrate how easily security breaches happen, I asked our department heads to attend a meeting on social engineering. Much to their dismay I explained how within 30 seconds I could break into our system and gain mid-level access to our (then) state-of-the art system, by making one phone call, without using my access code. They didn't believe me; they didn't want to believe the veil of security could dissolve so quickly. So I showed them how it's done. Randomly, I selected one of the department managers, making sure I did not know her personally. I chose Kelly Blake, who happened to be late to the meeting.

Tags:

Read the complete paper at www.internetviz-newsletters.com