Cambridge O Level Computer Science · Syllabus 2210 · The Internet and its Uses
Social Engineering
What is Social Engineering?
Social engineering is the manipulation of people, using trust, authority, fear, urgency or curiosity, into revealing confidential information or performing an unsafe action; phishing is one form of social engineering.
This definition is part of the The Internet and its Uses chapter in Cambridge O Level Computer Science.
Social Engineering in context
These three attacks aim at the person or at where their request is sent, rather than at breaking the system. Phishing sends a deceptive message — usually pretending to come from a trusted organisation — containing a link to a fake website, to persuade the recipient to give away personal details. Pharming uses malicious code or manipulated name resolution to redirect the user to a fraudulent website even when the correct address was entered. Social engineering is the broad practice of manipulating people — through trust, authority, fear, urgency or curiosity — into revealing information or doing something unsafe. Phishing is one form of social engineering; pharming is a technical redirection in which the user may do nothing wrong at all.
Common mistakes with Social Engineering
- M16 — "Phishing and pharming are the same thing." Why it is wrong Phishing sends a deceptive message and needs the victim to act on it. Pharming redirects the browser to a fraudulent site even when the correct address has been entered, so the victim may do nothing wrong. Phishing is a form of social engineering; pharming is a technical redirection. Say instead "In pharming the user typed the correct address and was still redirected; in phishing the user was persuaded to follow a link."
Questions students ask about Social Engineering
What is the difference between phishing and pharming?
Phishing sends a deceptive message, usually appearing to come from a trusted organisation, containing a link to a fake website, to persuade the recipient to give away personal details — it needs the victim to act on it. Pharming redirects a user to a fraudulent website using malicious code or manipulated address resolution, even when the correct address was typed correctly, so the victim may do nothing wrong at all. Phishing is one form of social engineering; pharming is a technical redirection.