Amelia Rose Smith 231233678 CARNEGIE MELLON UNIVERSITY Cyber threats : Social Engineering attacks 1. Give a thorough definition of social engineering attacks and some examples of the methods frequently employed in them. Engineering, social Attacks are a sort of security assault that uses psychological manipulation to take advantage of human frailty and collect sensitive data or gain entry to systems or data. These assaults try to trick their victim into doing things they shouldn't, such giving out private data or downloading malicious software. The following are some examples of methods frequently employed in social engineering attacks: a) Phishing: Phishing attacks include sending phony emails that resemble real websites in an effort to trick recipients into divulging sensitive information including usernames, passwords, credit card numbers, and other financial details. b) Baiting: Baiting strategies entice users with fictitious prizes to divulge information or grant access to restricted systems. Promoting free music or movies to download or others alluring prizes are typical forms of baiting. c) Pretexting: Pretexting assaults employ fictitious information or deliberate deception to gain access to systems or sensitive data. For instance, an attack may entail assuming another person's identity and using a fictitious justification to ask for personal data or entry to a system. d) Attacks using tailgating occur when an unauthorized individual follows an authorized person into a closed space. This method works especially well when an attacker is trying to enter a strongly secured area or structure. 2. Why are social engineering assaults frequently regarded as the most successful security attack methodology, and how can businesses and people defend against them? Engineering, social assaults are sometimes regarded as the most successful method for carrying out security assaults because attackers take advantage of human flaws and use trust to accomplish their objectives.Phishing, baiting, pretexting, and tailgating are just a few of the very successful methods that may be used to obtain access to confidential systems and data. Organizations and individuals may execute a number of precautionary actions to safeguard themselves from such assaults, including: a) Educating staff members about social engineering assaults and the methods employed in them. b) Utilizing security tools like firewalls, antivirus software, and spam filters for email. c) Putting in place stringent security measures, such as restricting access to critical data and confirming the identity of anyone asking for access. d) By carrying out routine safety inspections and scans to find infrastructure and system vulnerabilities. e) Confirming the identity of anybody asking for sensitive information. f) Update your security and software programs: Attackers frequently use software and security flaws as cover for Social Engineering Attacks. Individuals and companies can lessen the danger of such attacks by maintaining updated software and security measures. g) Use multi-factor authentication: By demanding additional authentication elements beyond simply a username and password, multi-factor authentication gives an extra layer of protection to systems and data. As a result, it is more challenging for attackers to access critical data or systems. h) Organizations and people alike should routinely check their computer networks and information for any suspicious activities, such as erratic login attempts or atypical data transmission. Attacks can be averted before they inflict significant harm with the use of early detection. i) Last but not least, it's crucial to have a healthy dose of suspicion in mind if you get unusual emails, phone calls, or additional correspondence asking for sensitive information. Before sharing any information, always be sure the requester is who they say they are. 3. Describe the specific steps an attacker may take to plan and carry out an effective social engineering assault, as well as how individuals and organizations can stop such attacks from happening. To increase the likelihood of success, social engineering attacks are frequently carefully planned and carried out in a methodical fashion. The actions an attacker could take to prepare and carry out an effective social engineering assault are listed below: a) Research is done by the attacker to learn more about the target, including the target's tasks, hobbies, and job title. A convincing attack will be created using this information. b) Targeting: The assailant will decide which individuals are most at risk, such as staff members who may be less concerned with security or who have access to private data. c) Making a plan: The attacker will make a plan for the attack and select the best social engineering attack strategy, such phishing or pretexting. d) Execution: To deceive the victim into revealing sensitive information or gaining access to systems, the attacker will carry out the attack by sending phony emails, placing bogus phone calls, or using other forms of contact. e) Persistence is the ability to keep trying, even after an early failure, and keep changing tactics until the attack is effective. Individuals and companies can take the following actions to stop social engineering attacks: a) Educate staff members: Employees should receive training to assist them identify social engineering attacks and stay safe from them. b) Use technology: To defend against social engineering attacks, use technology such as firewalls, intrusion detection systems, and antivirus software. c) Put security policies into action: Put security rules into action that restrict access to sensitive data and systems and authenticate the identity of people requesting access. d) Conduct routine security audits: Check security infrastructure and systems frequently for flaws that an attacker could exploit. e) Always be on the lookout for unwelcome messages or phone calls asking for personal information. Before sharing any information, be sure the requester is who they say they are.