Topics

Archives

Handy References


« | Main | »

Seven Principles for Security Systems

By Matt | February 11, 2010

This is a very good report:

Understanding scam victims:
seven principles for systems security
Frank Stajano, Paul Wilson
August 2009

Archived here.

While reading the example scams in the article, it becomes clear much like corporate fraud they depend on collusion. A team pulling off a social hack is far stronger then a single person trying to do so.

1) While you are distracted by what retains your interest, hustlers can do anything to you and you won’t notice.

2) Society trains people not to question authority. Hustlers exploit this “suspension of suspiciousness” to make you do what they want.

3) Even suspicious marks will let their guard down when everyone next to them appears to share the same risks. Safety in numbers? Not if they’re all conspiring against you.

4) Anything illegal you do will be used against you by the fraudster, making it harder for you to seek help once you realize you’ve been had.

5) Things and people are not what they seem. Hustlers know how to manipulate you to make you believe that they are.

6) Your needs and desires make you vulnerable. Once hustlers know what you really want, they can easily manipulate you.

7) When you are under time pressure to make an important choice, you use a different decision strategy. Hustlers steer you towards a strategy involving less reasoning.

Topics: General Security | No Comments »

Comments

You must be logged in to post a comment.