A general understanding of social engineering

Long Ying

What is the definition of social engineering?
Personal Opinion:

To cheat the other party by gaining trust, you must first have the following points:

1. When you gain the trust of the other party, you may have feelings with the other party! If this is the reason for interrupting your social engineering, we suggest you stop learning and be cold-blooded! Random Response

2. Be motivated by the idea of social engineering! Regardless of other feelings, the social worker!

3. The most important thing! Don't be soft. It's not a good opportunity in the future!

4. Social workers should read more books and read more about the art of war! Such as: Ghost, deception, and psychological operation. When reading a book to see a certain realm! Your capabilities will pop up!

5. Change your mind quickly and never let the other party see you! The more you want to fake it, the less trust you will have! Do not exaggerate yourself or social workers to have a true heart.

6. Social engineering is like a game! One step is all wrong, all are lost! Please be careful! You have to give yourself a way back! Leave several "backdoors" for yourself"

7. Calm down when a social worker is working.

----------------------------------------------

==============================
What is social engineering?
==============================
Social Engineering is a harmful means to the psychological traps of victims, such as deception and injury, through psychological weakness, instinct reaction, curiosity, trust, and greed.
In recent years, the method of obtaining its own interests has become a trend of rapid increase or misuse. So, what is social engineering? It is not the same as a general deception, especially in social engineering.
It is complicated. Even those who think they are the most vigilant and careful, they will be compromised by brilliant social engineering techniques.

In general, social engineering is an art and knowledge that allows people to obey your wishes and satisfy your desires. It is not just a way to control the will, but it cannot help you
It is not easy to learn and use people's behaviors outside of normal consciousness. It also contains a variety of flexible ideas and changing factors. At any time
Before obtaining the required information, the implementers of social engineering must: master a large amount of relevant knowledge and spend time collecting and talking about necessary information.
Communication Behavior of nature. Similar to previous intrusions, social engineering has to complete many preparations before implementation, even more than itself.
Heavy.

The trap of social engineering is to obtain the secrets of the user system from legal users by means of conversation, deception, counterfeiting, or speaking. For example, the user name list, user password, and network structure. As long as one person can't resist his curiosity and read the mail, the virus can go viral. Both MYDOOM and Bagle are viruses exploiting the social engineering trap. From social engineering, we gradually extended the attack techniques that use their primary core technologies, phishing attacks, password psychology, and some bold techniques that use social engineering to penetrate into target enterprises or internal systems to obtain the required information.
Social engineering is different from common deception/fraud, because social engineering needs to collect a large amount of information about the actual situation of the other party and conduct psychological tactics. the security brought by systems and programs is often avoided. In terms of Human Nature and psychology, social engineering is often a kind of weakness of human nature, greedy and other psychological manifestations of attacks are hard to prevent. by analyzing the existing methods of social engineering attacks, we use analysis to improve our defense methods for social engineering.