Security Term

Social Engineering

Psychological manipulation of people into performing actions or divulging confidential information, bypassing technical security controls.

What is Social Engineering?

Social engineering exploits human psychology rather than technical vulnerabilities. Common techniques include pretexting, baiting (leaving infected USB drives), tailgating (physical access), and impersonation. Security awareness training is the primary defense, as no technical control fully prevents human manipulation.

Understanding this concept is crucial for maintaining a robust security posture. In the context of modern cyber threats, social engineering represents a significant area of focus for security professionals and organizations alike.