-: In this section, we're going to discuss social engineering.
Now I know I've talked about a lot throughout this course,
but we're going to use this short section
to kind of review some of the main concepts
to make sure you're good for test day.
Now, social engineering is any act
that manipulates users into revealing
confidential information or performing
other actions that are detrimental to that user
or the security of our systems.
Now, there's lots of different types
of social engineering.
There's things like pretexting,
malicious insider threats, diversion theft,
phishing, hoaxes, shoulder surfing,
eavesdropping, dumpster diving, baiting,
piggybacking, and watering hole attacks.
We're going to talk about all of these
throughout this section.
And then we're going to talk about the importance
of user education, because the user
is really important in helping us avoid
social engineering attacks.
So, let's get started in the next lesson
where I'm going to show you how a pretext actually occurs.
(buzzing)