The Pros And Cons Of Social Engineering

Background
Social engineering is a term used in political science in a double sense, one refers to efforts to influence attitudes, relationships or social actions in the population of a country or region, and the other a way to implement programs of social changes.
Despite the negative connotations the term has today, it should be noted that all efforts of a social or civil organization with the goal of changing the behavior can be described as social engineering. If we think about the scope of the policy we will see that the term is definitely applicable; in the U.S. conservative politicians have accused their opponents of social engineering because of its promotion of political correctness, given that attempts to define the languages acceptable

or unacceptable. Both conservatism and the right, have been accused of social engineering, where they promote social behavior "of order" derived from moral or religious considerations.
Origin and evolution of the term
The use of the term began in 1894 with a trial of businessman and philanthropist Dutch J.C.

Van Marken, released in France by Émile Cheysson (one of the members of the Social Museum), but received its biggest boost in the U.S. throughout the book "Social Engineering" of the social reformer Tolman W.H., known at that time for "helping the poor". The central idea is not a social function (something like today's human resources departments), had in companies by what the social engineer had a role of mediator to resolve disputes as rational intermediary between capital and labour. In this sense, social engineer should have social skills, in contrast to the later use of the term, based on the metaphor of the machine which becomes the core of the current pejorative concept, popularized from

1911
It is suggested that the origin of the term is in the philanthropic concept of the liberal thinkers of the second half of the 19th century as "rational intermediaries" between capital and labour.

For the decades of 30 and 40 of the 20th century the term had fallen into disuse.
From this specialization, generalizes the concept that social engineering can be a technique or method to achieve a variety of results, i.e., ceases to be an instrument to solve social problems and turns into one to manipulate the population. It is clear at this point that propaganda can be considered social engineering, as well as the political campaigns and the religion, since they seek to achieve a specific behavior in the masses. In 1945, Karl Popper reintroduced the term with the meaning of critical and rational methods of engineering and science to social problems.
Presentation of the problem – social engineering and security - legal

framework
Social engineering is the practice of obtaining confidential information by manipulating legitimate users. One of the most common purposes for social engineering is using is for the theft of money, whether through a Bank, an automatic teller machine (ATM) or by phone, depending on the features of these services in the banks or financial firms. The offence that is constituted in this case is identity theft and not in all countries there is specific legislation or legislated as cybercrime.
This circumstance is complicated, but in my opinion is more complicated and distressing for the victim to prove that actually suffered an identity theft and that did not take all the money that is missing in your account, or several loans that were processed on their behalf to did them. This type of crimes have been made possible due to the characteristic of anonymity afforded Internet and because, in general terms and in my opinion, Web pages that financial institutions made available to natural persons do not provide sufficient security measures, such as multi-factor authentication techniques (MFA -multi factor authentication), as well as on-site and explicit measures of awareness beyond the simple "safety tips" that we find in the Web pages of course the average user does not enter which.
From the point of view of the Bank or financial institution is also challenging investigations and proceedings to be followed in order to conclude that the person was actually victim of a crime and that he is not lying, whereas in these situations there are psychological aspects to analyze as the financial behavior of the person, the profile of relationship or linkage with the Bank as well as correlations in behavioral issues i.e. how many extractions is, often have, what amount, where was the person when extractions were produced, if it made major expenditures at the same time as extractions and that they do not coincide with your profile, etc. In some situations, customers who were victims may feel "that they are guilty until they prove otherwise", although in general terms the banks is taken care and return money to clients after proper investigations. Another important aspect and that it adds complexity is if law enforcement authorities from different countries are trained in specific expertise (forensic computing and others) and to manage computer-related crime.
Why average people can fall before these attacks, is an explanation which we leave for the psychological section of this article. The process is gradual and consists of several steps with a well defined strategy; the following to obtain information is know the profile of the victim and define what is the most efficient to take over their sensitive data, to impersonate her.
The psychological aspect
Continuing the theme, we investigated what contributions can make psychology.
Are several profiles that fit well with the victim, but to not extend us we will refer to the most common and which appears more: complex superhero who see someone asks aid not been tempted to help? Statistically it would be 70% of the world's population, because human beings are originally born well, the remaining 30% are Sociopaths or psychotics. (USA). UU.-DSM4 diagnostic and Statistical Manual of mental disorders).
Do you feel when you help?, first appreciation of the person, with phrases such as "God bless", "saved my day", "there are no people like you in these times", etc. This acts as a strong reinforcer for behavior help repeat would why a firefighter enters a large fire to save someone? For the salary? No, because to save him as well as the gratitude of the victim and the family receives applause and social recognition, human and his superiors. Which are most gratified it is the social and human and the headlines reinforce it ("firefighter hero saves woman!").
As children we learn that help is good, and sometimes it is. When we are against computer-related crime, it is different.
The perpetrator knows that if you ask for help and there are three persons, at least two will be offered. And perpetrator saying yes is a sociopath. Its features are seem harmless, helpless, worried, depressed. In reality it is cold, calculating, mythomaniac and always knows what it does: knows to differentiate the good from the bad, but you don't (Spain-CTIO, international statistical classification of diseases and health problems).
If somehow stop it, which is unlikely since you always have a plan "b", "c," "d," etc., it is able to fool the best judge or psychiatrist and psychologist, since it is a great Simulator.
Does not care about the harm that inflicts or if you do feel bad to each other, is more, feels good, and if they are interned, unfortunately there are usually curable. There is still this dysfunction drug and it is not considered by DSMV (diagnostic and Statistical Manual of mental disorders) as a pathology.
So let's teach our children that help is good, but not in a situation where there is to show documentation or sensitive information. And since the sociopath can be very violent if not an end, it is recommended to analyse all call for help when it comes from a friendly stranger.
Unfortunately our society has evolved a lot in some aspects, but there are 30% of humans who, I think, REGRESS, they wake up and fall asleep thinking about how to do evil, for their own benefit.
Not to be so pessimistic, we are left with 70% of the population that is good, but you should know that the HEROES do not exist.
The legal aspect
International studies have shown that identity theft has become the crime of the Millennium and is one of fastest growing illicit activities in recent years.
In regards to the legal regulation in the field of identity theft, various international agencies have taken the initiative to act on this issue. Below a brief summary of documents that were prepared by different bodies:
• Organization for cooperation and economic development (OECD).
or In 1999 approved a set of guidelines designed to protect electronic commerce, with measures for identity theft prevention strategies.
or Published a study on identity theft online, the "scoping paper on online identity theft", which analysed the different scams related to the theft of identity through the Internet, issues related to victims and the areas of law enforcement in 2008.
or In the same 2008 published the document "Policy Guidance on Online Identity Theft", which provided an overview of the different strategies to respond to identity theft related to Internet.
• European Union.
or In May 2007 indicated that "police and judicial cooperation within the European Union would be facilitated if identity theft is categorize as a criminal offence in all Member States".
or In July 2007 initiated a comparative study on the definitions of the term "identity theft" used in the Member States of the European Union and its criminal consequences.
• United Nations.
or The United Nations against the transnational organized crime Convention constitutes the applicable legal basis for cooperation in cases of fraud transnational connected in terms of identity theft.
or The Economic Council and Social of the United Nations, by resolution 2004/26 established guidelines on the variety of offences involving the counterfeiting of identity.
or In the 2007 report of the United Nations Office on drugs and crime a section was devoted to the analysis of identity theft. Also in its report 2010 "The globalization of crime, a transnational organized crime threat assessment", a section of it is linked to identity theft.
• In comparative law between countries that have defined the crime of identity theft, are Canada, United States and United Kingdom.
or Of Canada federal law defines identity theft as 'obtaining and possession of information of the identity of a person intending to cheat or be dishonest or fraudulent acts on their behalf'.
or At the federal level, the United States defines identity theft as he "knowingly possess, transfer or use, without legal authority, a means of identification of another person with the intent to commit, aid or abet, any unlawful activity".
or In the United Kingdom, identity theft is defined by the Home Office Identity Fraud Steering Committee, as "the Act by which someone gets enough about other's identity information to facilitate identity fraud, regardless of who the victim is alive or dead".
or While in Uruguay is not criminalized in the penal code the crime of identity theft, a fact of social engineering, which are deceived and psychologically manipulates the victim into revealing personal data that would not open under normal circumstances, should be the article 347 that typifies the scam: "which with stratagems or deceptions contrived ", it induces in error to someone, to procure himself or a third person, an unfair advantage, shall be punishable by six months in prison to four years in prison."