The weakest link in the security chain is between the keyboard and chair. We intuitively trust humans on their word. This talk will focus on a personal story, deceptive and abusive tactics to convince people to divulge confidential information, and what can be done to prevent this.

1. Security is an Illusion
JandBeyond 2015
Jessica Dunbar

2. About Me

3. What is social engineering?
01

4. 01. What is Social Engineering?
Security is an Illusion Jessica Dunbar
Social engineering, in the context of information
security, refers to psychological manipulation of
people into performing actions or divulging
confidential information. A type of confidence trick
for the purpose of information gathering, fraud, or
system access, it differs from a traditional "con" in
that it is often one of many steps in a more complex
fraud scheme.
http://en.wikipedia.org/
wikiSocial_engineering_(security).

5. 01. What is Social Engineering?
Security is an Illusion Jessica Dunbar
pic of my kids.

6. methods
Security is an Illusion Jessica Dunbar
main methods of SE

7. Methods
Security is an Illusion Jessica Dunbar
Impersonation

8. Methods
Security is an Illusion Jessica Dunbar
Posing as an important user

9. Methods
Security is an Illusion Jessica Dunbar
Being a third party

10. Methods
Security is an Illusion Jessica Dunbar
Tech Support

11. Methods
Security is an Illusion Jessica Dunbar
Shoulder surfing

12. Methods
Security is an Illusion Jessica Dunbar
Dumpster Diving

13. Methods
Security is an Illusion Jessica Dunbar
Phishing

14. 01. What is Social Engineering?
Security is an Illusion Jessica Dunbar

15. 01. What is Social Engineering?
Security is an Illusion Jessica Dunbar

16. 02
What Can You Do?

17. 02. Prevention
Helpful
Security is an Illusion Jessica Dunbar

18. 02. Prevention
The only way you are safe from
web is if your computer is
unplugged
Security is an Illusion Jessica Dunbar

19. 02. Prevention
Security is an Illusion Jessica Dunbar

20. 02. Prevention
important things:
Education
Penetration testing
And common sense
Security is an Illusion Jessica Dunbar

21. 02. Education
Security is an Illusion Jessica Dunbar

22. 02. Education
Security is an Illusion Jessica Dunbar

23. 02. Education
Security is an Illusion Jessica Dunbar
What to do if an attack occurs
What to do when they click,
answer the phone, let
someone in.
Why
communicate the risk.

24. 02. Education
Security is an Illusion Jessica Dunbar
Penetration Tests (pentest)

25. Story Time

26. Story Time
Security is an Illusion Jessica Dunbar
Room Number

27. Story Time
Security is an Illusion Jessica Dunbar

28. Story Time
Security is an Illusion Jessica Dunbar
Pentest

29. Story Time
Security is an Illusion Jessica Dunbar
Information Gathering

30. Story Time
Security is an Illusion Jessica Dunbar
Maltego

31. Story Time
Security is an Illusion Jessica Dunbar
Profiling

32. Story Time
Security is an Illusion Jessica Dunbar
Here’s what I found

33. Story Time
Security is an Illusion Jessica Dunbar
Finding A Way In

34. Story Time
Security is an Illusion Jessica Dunbar
Sally Sue
Born July 24, 1988
Enjoys playing in the rain
drinking coffee
Works at Subway and as a
office Assistant for WordPress
Apartments

35. Story Time
Security is an Illusion Jessica Dunbar
Austin Allen
Born April 21, 1979
Likes Star Wars and The
Muppet Movie
is a superintendent for
wordpress Apartments

36. Security is an Illusion Jessica Dunbar
Janice marks
March 30, 1986
Likes kayaking, exploring, and
getting lost
Works as a Technology
Support Specialist for Matt
mullenuage properties!

37. Security is an Illusion Jessica Dunbar
More info on sally

38. 02. Education
Security is an Illusion Jessica Dunbar
The Research

39. 02. Education
Security is an Illusion Jessica Dunbar
Goals:
Phone
Test physical access
access secure areas

40. 02. Education
Security is an Illusion Jessica Dunbar
Trust

41. 02. Education
Security is an Illusion Jessica Dunbar
Trust

42. 02. Education
Security is an Illusion Jessica Dunbar
The Hack

43. Summary

44. 02. Education
Security is an Illusion Jessica Dunbar
Build Trust

45. 02. Education
Security is an Illusion Jessica Dunbar
Build a credible story

46. 02. Education
Security is an Illusion Jessica Dunbar
developing policies:

47. Conclusion
• Be educated
• Get regular check ups
• Think

48. THANK YOU!