1. Social engineering
Servers and network
2012 Autumn
Morten Bo Nielsen
Mon@eal.dk

2. Old school
It's all about the
money
● Hustling
● Scams
Example
Networks and servers - Mon@eal.dk 2

3. Psychology of scams
“cognitive and motivational
processes”
● trust and authority
● visceral triggers
● human desires and
needs
● greed, fear, avoidance of
physical pain, or the
desire to be liked
Networks and servers - Mon@eal.dk 3
Go here for full story

4. Inducing judgement errors
● Scarcity cues
● Unique opportunity
● Induction of behavioural
commitment
● Start small and get them rolling
● Extreme cost/benefit
● Lack of emotional control
● A psychological trait of victims
Networks and servers - Mon@eal.dk 4

5. Examples
Who needs spam, when we have this link
http://www.urbanmillionaires.com/
Question:
● Is it true? Is it trustworthy?
● Puts words on it from the previous slides.
● Still think it is trust worthy?
Networks and servers - Mon@eal.dk 5

6. Examples
Emotional distress
steal a womans hand bag
Question:
● Is this possible?
● Is she gullible?
Networks and servers - Mon@eal.dk 6

7. Still old school
● Gaining access to places you are not allowed
● http://www.youtube.com/watch?v=kOEWd_M5m44
● The secret:
Look as if you belong.
Networks and servers - Mon@eal.dk 7

8. Relation to security
● No security with
physical access
● Why go through the
firewall, if you may
walk past?
Networks and servers - Mon@eal.dk 8

9. People on the move
Steal the laptop (covertly)
laptops in airports
Networks and servers - Mon@eal.dk 9

10. People on the move
Use their telephones against them
● for profit
● reading the calendar, mails, SMS
● As a bug
Networks and servers - Mon@eal.dk 10

11. People on the move
● Mobile IT
● A security nightmare
● Too many variables
Is this ok to use?
Could it be fake?
Networks and servers - Mon@eal.dk 11

12. People at the office
● Make them tell you their passwords.
● Teachers recurring story – this time with an external
reference....
● from the BBC
Question:
● Is this realistic? In Denmark?
Networks and servers - Mon@eal.dk 12

13. People at the office
● Spam
● Check your mailbox
Networks and servers - Mon@eal.dk 13

14. People at the office
● Receptionists are a
crucial part of security
● Educate people
● Like this?
Networks and servers - Mon@eal.dk 14

15. Closing word
Which on to use?
Technical vs. social
Answer: Both
To read more, see this
Networks and servers - Mon@eal.dk 15