保密安全中窃密事件的社会工程学应用研究

Study on the application of social engineering in secrets of confidentiality and security

窃密事件一直是保密工作者日常工作中的防范重点,在物防技防方面,依托于科技的高速发展,保密工具的防护能力有了创新式提升,使得窃密者需要掌握更加高级且全面的科技窃密手段达到非法获取的目的,无形之中加大了窃密难度。由于三防中的"人防"具有主观漏洞和不可控性的特点,利用社会工程学的相关手段,使得窃密行为可操作性增大。文章通过对社会工程学相关内容进行分析,进一步探讨社会工程学在保密中的应用手段,并提出相关的防御措施。

The theft of secrets has always been the key point of security workers in their daily work. In the field of physical defense, with the rapid development of science and technology, the protection ability of secret-keeping tools has been improved in an innovative way, which makes the secret-stealer need to master more advanced and comprehensive technology secret-stealing means to achieve the goal of illegal acquisition, that makes it harder to steal secrets. However, due to the subjective loophole and uncontrollability of the human defense in the three defense systems, the use of social engineering means makes the operability of stealing secrets increase. Through the analysis of the related content of Social Engineering, this paper further discusses the application of social engineering in secrecy, and puts forward the relevant defensive measures.