RE: Social Engineering Data set

From: Craig Wright (cwright@bdosyd.com.au)
Date: Wed Oct 11 2006 - 20:42:39 EDT


This is as this is usually charged as a normal criminal offence such as:
        Extortion
        Fraud
        Misrepresentation
Etc

There is plenty of data, just do not limit it to "social engineering" as
a court and most of the legal system will not call it this

Craig

-----Original Message-----
From: listbounce@securityfocus.com [mailto:listbounce@securityfocus.com]
On Behalf Of xun dong
Sent: Wednesday, 11 October 2006 8:32 PM
To: pen-test@securityfocus.com; security-basics@securityfocus.com
Subject: Social Engineering Data set

Hello list;

I am currently doing research on Social Engineering Attacks. Unlike the
technical hack, I found that there is few useful and well documented SE
attack examples on the Internet. So I decided to create a data set for
SE attacks, and I am willing to publish it for free on the Internet.

However, I think only my own experience would not be able to make this
dataset as comprehensive as possible. So I would like to ask for help on

this list. If you think you have SE attack examples, you can email me.
Of course for confidential reason you should not use the real name in
your example. If you don't mind I will also publish your name along with

the example you provided. Thanks a lot in advance. I hope this could be
a step forwards in protecting against SE attacks.

--
Xun Dong
Research Associate
Department of Computer Science
University of York

------------------------------------------------------------------------

---
This list is sponsored by: Norwich University
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic
Excellence
in Information Security. Our program offers unparalleled Infosec
management
education and the case study affords you unmatched consulting
experience.
Using interactive e-Learning technology, you can earn this esteemed
degree,
without disrupting your career or home life.
http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---
Liability limited by a scheme approved under Professional Standards Legislation in respect of matters arising within those States and Territories of Australia where such legislation exists.
DISCLAIMER
The information contained in this email and any attachments is confidential. If you are not the intended recipient, you must not use or disclose the information. If you have received this email in error, please inform us promptly by reply email or by telephoning +61 2 9286 5555. Please delete the email and destroy any printed copy. 
Any views expressed in this message are those of the individual sender. You may not rely on this message as advice unless it has been electronically signed by a Partner of BDO or it is subsequently confirmed by letter or fax signed by a Partner of BDO.
BDO accepts no liability for any damage caused by this email or its attachments due to viruses, interference, interception, corruption or unauthorised access.
------------------------------------------------------------------------
This List Sponsored by: Cenzic
Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------


This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:57:11 EDT