What is Social Engineering? Introducing 7 Countermeasures!

What is Social Engineering?

It refers to a method of stealing confidential information such as passwords for entering a network without making full use of information and communication technology.

I think many people have heard the term social engineering. However, there may be a misunderstanding that it is the name of an engineer who has some expertise. In fact, it refers to a method of stealing confidential information such as passwords for entering a network without making full use of information and communication technology. There are many sneaky things that take advantage of people's psychological gaps and actions. This time, we will introduce various methods and countermeasures for social engineering.

7 Social Engineering Measures

How can we avoid social engineering, which has various risks? Here, we will introduce effective measures for social engineering. Please be aware of it and try to protect yourself.

Measure 1: Increase media literacy

Media literacy refers to social ethics when dealing with various media. It is important to keep learning how to identify information when browsing SNS on the Internet as well as mass media such as TV and magazines. For example, it tends to be easy to swallow information sent by your favorite celebrities and acquaintances. Even if it is wrong as information, it will be believed and spread easily. When dealing with information, try to judge the authenticity of the source.

Measure 2: Do not use personal information unnecessarily

If you receive an inquiry by phone or email about your account number or credit card number, don't tell it easily. The same is true for online shopping sites and SNS. Basically, it is not possible for banks, credit card companies, affiliated operating companies, etc. to suddenly inquire about confidential information by phone or email. If you receive an inquiry about information, it is better to judge it as a fake. Also, be aware that there are cases where you call yourself a police officer or an attorney.

Measure 3: Utilize shredder

Trashing, which steals confidential information from office trash, is more easily targeted than household trash. This is because office garbage is relatively easy with less kitchen waste. It is also considered a place where confidential information is easily targeted. Use a shredder to crush information documents and memos that are difficult to leak, and then throw them away.

Countermeasure 4: Check the URL and then click

In social engineering, one thing to watch out for is phishing scams. This is because there is a high possibility that leakage of confidential information will lead to financial damage. You will need to be highly aware of the crisis. Also, in the case of phishing scams, there are many cases where strings are used in a manner similar to the URL of a real site. Even if you are familiar with it, do not open the URL listed there easily. The point is to search and confirm.

Countermeasure 5: Do not write anything that can be identified on SNS

It is possible that hackers and other human beings who aim to abuse are monitoring posts on SNS and researching detailed personal information such as behavioral tendencies and hobbies and preferences in order to identify the target. there is. In addition, we may contact with a fake account and steal information after trusting the other party, or in some cases, select a home and use cunning techniques such as burglary and stalking. As a social engineering measure, it is important not to post information that can identify individuals or families on SNS.

Countermeasure 6: Make software etc. updated

Personal computers and smartphones operate while the internal software processes the entered information. However, computer software, web browsers, and email software used to send and receive emails may become vulnerable over time. The program for the correction is distributed by each manufacturer, but it is important to keep the program and antivirus in an updated state as a social engineering measure.

Measure 7: Make rules for handling login information and passwords

As a social engineering measure, establish your own management method for login information and passwords. By reviewing passwords that may be accessed illegally and creating your own rules, it is possible to prevent social engineering that is approaching in various ways. For example, by strict rules such as not proclaiming important passwords, awareness of social engineering measures may be raised.