Social Engineering

Question 1

what is social Engineering

Answer 1

• a way of gaining sensitive information or illegal access to networks
• by influencing people, usually the employees of large companies

Question 2

what are the two main types of social Engineering

Answer 2

• over the phone

- phishing

Question 3

how does social Engineering take place over the telephone

Answer 3

• someone rings an employee of a company
• pretending to be a network administrator or somebody else within the organisation
• they gain the employees trust and persuade them to disclose confidential information

Question 4

what is phishing

Answer 4

• when criminals send emails or texts to people claiming they are from a well-known by business
• the email contain spoof versions of the company’s site
• they request that thef user update their personal information
• when they do they hand it to the criminals

Question 5

how do we protect ourselves from phishers

Answer 5

• many email programs, browsers and firewalls have anti-phishing features
• they reduce the number of phishing emails received

Question 6

what are sql injections

Answer 6

• pieces of sql types into a websites input box

- which then reveals sensitive informsation

Question 7

how do sql injections work

Answer 7

• a website may allow you to view your account information as long as you enter your password into an input box
• if a websites sql code does not have strong enough input validation
• someone may be able to enter a piece of sql code which allows them to access other peoples account information as well as their own