CINPA Mtg March 6, 2024 - Human Hacking (Social Engineering) - Charles Lester
Human Hacking (Social Engineering):
Human hacking, also known as social engineering, “is about hacking the human mind, something that in many ways is significantly easier than finding a new hat vulnerability and using it as a gateway into your enterprise.” Tomer Teller
The presentation (1) analyzes how social engineering works, (2) reviews some typical attacks with specific examples, (3) notes the impact of AI on certain types of attacks, (4) provides a framework to understand why social engineering attacks are so successful, (5) provides some suggestions on how to undermine the ability of the social engineering attacks to succeed, and (6) provides resources for study.
Charles T. Lester, Jr., JD, CISSP
Charles has been a licensed attorney for forty-four years, and has tried cases before juries in both federal and state courts. He also has been involved in securing secrets and systems for a number of different companies over the years, and currently is on the Platform Operations team at Great American. He is secretary of both the Cincinnati Infragard chapter and the Cincinnati Tri-State ISC2 chapter, is Security Director for the Cincinnati Networking Professionals Association(CiNPA), and runs the CiNPA Security SIG, which meets every third Thursday of the month to provide CPE opportunities for local security professionals.