Engenharia social: avaliação de riscos e vulnerabilidades tendo o fator humano como o elo mais fraco da segurança da informação

• Autor(a) principal: Guarezi, Júlio
• Data de Publicação: 2019
• Tipo de documento: Trabalho de conclusão de curso
• Idioma: por
• Título da fonte: Repositório Universitário da Ânima (RUNA)
• Texto Completo: https://repositorio.animaeducacao.com.br/handle/ANIMA/11039
• topic: Engenharia social; Segurança da informação; Informação; Organização; Ser humano

Assuming that information is currently one of the most valuable assets for an organization, this paper aims to demonstrate how Social Engineering can be used to exploit human behavioral characteristics in order to gain benefits or sensitive information. In every organization the weakest link in information security is the human being. Most companies are not prepared or do not give due attention to this topic. Thus, this work aims to: analyze the main techniques and strategies used by Social engineering to exploit the vulnerabilities and risks to which organizations are exposed; And, conduct a case study with the analysis of vulnerabilities and risks related to information security. To evaluate the proposal, an intrusion test was applied to a company in the glass industry, with the application of some techniques of Social engineering. It was possible to see that the company does not have an efficient management of information security, and thus is vulnerable and an easy target for criminals to obtain sensitive and essential information to the business.