Site Sponsor:

mcafee_logo.gif
line

Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

« Trojan Targets Commercial Bank Accounts | Main | Apple Patches (in a big way) Tiger and Leopard »

Pew Survey: Online Identity Not Much Concern but What About Phishing?

The Pew Internet & American Life Project just released a survey entitled Digital Footprints: Online identity management and search in the age of transparency (pdf) that finds not much concern about personal information available online. From a release about the report:

most internet users are not concerned about the amount of information available about them online, and most do not take steps to limit that information. Fully 60% of internet users say they are not worried about how much information is available about them online. Similarly, the majority of online adults (61%) do not feel compelled to limit the amount of information that can be found about them online.

I suspect this stems from a feeling that most people don't feel like they have anything to hide. Phishers appreciate that.

The report notes that Web 2.0 technologies are changing how much can be known about a person. It's no longer just name, address and phone number like in the days of phone books. More personal information is volunteered to social networking sites. If you want to improve the click through rate a phishing scam, where would you start? How about by writing lures that are customized to the recipient.

The problem isn't that we make too much available to others but that our sense of caution with regard to how it can be used against isn't keeping pace, we're still too susceptible to social engineering attacks.

TrackBack

TrackBack URL for this entry:
http://www.realtime-websecurity.com/type/mt-tb.cgi/565

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Dan Sullivan's Bio:

Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net