Social Engineering Attack Framework (SEAF) - Understanding the Process
Social Engineering Attack Framework (SEAF) provides a structured approach to executing social engineering attacks. It defines the attack framework, assists in planning and execution, and helps in verifying the success of the attack. The process involves identifying the attack goal, assessing potential sources, analyzing information, developing attack plans, establishing communication, building rapport, priming the target, eliciting information, and maintaining control over the situation.
Download Presentation
Please find below an Image/Link to download the presentation.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author. Download presentation by click this link. If you encounter any issues during the download, it is possible that the publisher has removed the file from their server.
E N D
Presentation Transcript
Social Engineering Attack Framework SEAF
What is SEAF / What is the Purpose of SEAF? Social Engineering Attack Framework Purpose: Defines an attack framework that all SE attacks follow Allows one to generate and plan SE attacks Allows one to verify whether an attack was indeed an SE attack
Identify the goal of the attack What does the social engineer want?
Identify potential sources Which sources has the information that is needed to accomplish the goal?
Assessment of sources Investigate sources for useful things to aid in goal satisfaction
Combination and analysis of sources Develop pretext if required Put source assessment findings together as prep to attack
Development of an attack vector Establish plan of attack and how information will be elicited.
Establishment of communication Initiation of communication Email One-to-one conversation USB flashdrive
Rapport building Build relationship Build trust
Priming the target Put target in the correct state of mind for the attack
Elicitation Retrieve required information bits from the target
Maintenance Perform measures to calm individual and to put him back into his normal state of mind
Transition One can choose to perform a transition to one of two states: Transition to further development of an attack vector Transition to goal satisfaction
Goal satisfaction In this state your initial goal has been satisfied and there is no intention to use the same target for information again
