论文部分内容阅读
随着计算机技术的发展,及网络安全技术的完善,入侵变得越来越困难和易被发现,一种古老的入侵手段—社会工程入侵以其灵活及隐蔽的特点逐渐被重视。Gartner集团信息安全与风险研究主任RichMogull认为:“社会工程学是未来10年最大的安全风险,许多破坏力最大的行为是由于社会工程学而不是黑客或破解行为造成的。”文中从社会心理学的角度结合社会工程入侵实例进行分析,得出社会工程入侵的常用技术手段,并针对这些手段提供了一套相对有效的措施抵御该类入侵。
With the development of computer technology and the improvement of network security technology, intrusion becomes more and more difficult and easy to be found. An ancient invasion means - social engineering invasion has been paid more attention due to its flexible and hidden features. According to Rich Mogull, director of information security and risk research at Gartner, “Social engineering is the biggest security risk over the next 10 years, and many of the most devastating are due to social engineering rather than hacking or hacking.” " Psychology perspective combined with examples of social engineering intrusion analysis, draw the common technical means of social engineering invasion, and for these means provides a set of relatively effective measures to resist such intrusion.