Unmasking the Social Engineer: The Human Element of Security

Christopher Hadnagy The Science of Nonverbal Communication with the Art of Social Engineering Most researchers agree that a large portion of what we communicate is done not through what we say, but how it is said. A combination of our facial expressions, body language, vocal tone and other indicators can tell the receiver our intent, our emotional content and the meaning behind the message. Our brains take in these queues and then decide how we will react to them. We, without thought, decide to trust someone based on their posture, smile and body language. We feel uneasy or distant from someone else for the lack of smile or aggressive body language. Understanding this not only has many implications to communication, but it has some serious security implications, too. What is Nonverbal Communication? Kinesics: This term essentially describes body language and how our bodies can give away the emotion we are feelingProxemics: This term concerns our use of the space around us and how it can indicate comfort or discomfortTouch: Our sense of touch goes a long way in communicating to our brains what's going on around us, and, in the same way, can communicate emotions to othersEye Contact: You may have heard the phrase, "The eyes are the windows to the soul," and it's true, the eyes can give clues away about our emotional stateOlfactics: This is the study of smell and how our bodies associate certain smells with emotions and feelingsAdornment: Clothing, jewelry, make up, and even hair can set us apart and tells people about us without wordsFacial Expressions: The human face holds a lot of information about what we are feeling; it can tell a whole story without words Which expression is happy and which is full of fear? It's all in the eyes. Implications to Communication - and Security Some studies suggest more than 50 percent of communication is nonverbal. Truthfully, though, it's hard to attach a real percentage to this phenomenon because it changes according to the type of communication, its purpose, toward whom it is directed, and many other factors. Regardless, most researchers agree that if a percentage could be attached to nonverbal communication, it would be quite high. Researchers like Dr. Ekman and Dr. Paul Zak have found how facial expressions and body language can create a strong bond with other people, developing trust and rapport quickly. While this is important for building relationships and strong bonds, it is also used by the con man and social engineers to gain compliance to actions that you should not take. Education is the Key As Unmasking the Social Engineer discusses these implications in depth, a question I often get asked is, If we react automatically, if it is really chemical reactions, then how can we be protected and secure? This is an excellent question with a very simple, yet difficult answer education. If we remain unknowledgeable about the methods that are used or the psychology behind them we can never be aware of when malicious methods are being used against us. It is only when you are aware, educated, and taught to recognize these methods that your auto pilot can be corrected to not react with auto-compliance but with caution. The goal is not to create paranoia or doubt in every communication you have with another person, but to take the research from some of the world's greatest minds and apply it to security.