Impacts of Social Engineering on Information Security

Abstract

Currently, there are several types of methods of obtaining data, which can be from people, equipment or even companies. This data can be used in different ways, ranging from a simple purchase suggestion to a customer, to the exploitation of system vulnerabilities to obtain sensitive data from an organization.

One of the most worrying methods for information security is what they call social engineering, as they do not require technical knowledge, but rather persuasion power to get important information from the people themselves or simply a search on social networks and obtain data there, which to the person, they may mean nothing, but to an attacker, it could be the beginning of discovering a vulnerability.

This article addresses the issues that social engineering causes for personal and business security, how these issues can be addressed, and what can be done to mitigate the issues caused by these data leak.