social engineering attack surface-a tech definition

T-Blog Editor/ December 16, 2020/ About data center as a service (DCaaS), Batting for Tech in the Covid-19 Times, Best practices for data center operations, Email and messaging threats, Tech Definitions

Reading Time-approximately: < 1 minute

The social engineering attack surface is the totality of an individual or a staff’s vulnerability to trickery.

Posted by: Margaret Rouse

WhatIs.com

Contributor(s): Matthew Haughn

Social engineering attacks usually take advantage of human psychology: the desire for something free, the susceptibility to distraction, or the desire to be liked or to be helpful. Social engineering is often used by hackers and other thieves.

 A few examples of social engineering attacks:

• A faked call to IT posing as an employee to get a password.
• Media drops, which are much like a physical Trojan horse: An enterprise employee might pick up an apparently lost flash drive in the parking lot, for example, that in use will execute automatic running code leading to a data breach.
• Fake service people, such as janitors, repair people or electricians gaining access to server closets.

The main thing one can do to reduce the social engineering attack surface is to educate employees about known risks and about how social engineering hackers tend to operate. This information can help them reappraise innocuous-seeming interactions that could lead to data breaches, long tail intrusions and lost operational time.

 Many attack approaches us a combination of attack surfaces to gain access to resources. Social engineering is often used to gain physical access, for example, that enables an intruder to exploit software vulnerabilities.