Patent ID: 8464346

Claim:
A method for performing one or more social engineering attacks on a plurality of humans connected in a Network for assessing vulnerabilities of the plurality of humans in the Network, the Network comprising at least one of a plurality of data processing devices, memory devices, and a plurality of communication links, the method comprising: gathering information about human profiles including collecting information about target users from actively used social and search sites, and performing at least an automated Social Engineering (SE) phase and updating an Information Model based on the gathered information, wherein the automated Social Engineering phase on the Network is performed by performing at least one of: creating a human profile, creating a human psychology model, impersonating or building the trust between an attacker and a target; generating a Multiple Attack Vectors (MAV) graph based on the information gathered in the Information Model and one or more scan parameters for showing possible paths to compromise the Network; planning the one or more social engineering attacks based on the MAV; and launching the one or more social engineering attacks to access vulnerabilities in the humans of the Network.