Technology to make people hand over invisible keys - the ultimate goal of social engineering (2000s-present)
The ultimate purpose of social engineering can be summed up in two points: information gathering and empowerment. The core of social engineering is to make the other party voluntarily reveal information that he or she would not normally reveal to the outside world, and to make the other party believe that he or she has been given access and decision-making authority based on his or her own judgment. Behind this is an asymmetry in which information and authority are distributed unequally. When people answer questions, they instantly evaluate whether the other person is trustworthy and decide whether or not to disclose information depending on their impression. Role setting by title, attitude, and narrative influences unconscious judgment. Taking the form of a request or consultation, rather than coercion or command, creates a sense of self-determination and weakens defenses. Contemporary research also suggests that relationships and psychological processes, rather than technol
ogical vulnerabilities, are the greatest weaknesses. The design of a structure that allows people to quietly offer up information and authority is the essence of this technology.
No comments:
Post a Comment