Access Control and Identity Management, 3rd Edition

Case Studies and Examples

Access control systems that address human nature—and the problems human nature can introduce—focus on social engineering attacks. The case studies in this chapter also focus on social engineering and how to implement access control policies that will prevent those types of attacks.

Private Sector Case Study

Private-sector organizations are often the targets of social engineering attacks. They tend to be less well protected from social engineering attacks than governmental organizations. For this reason, foreign governments as well as competitors often target them.

Consider the case of Acme Software, a large technology firm. They produce software-based firewall and email encryption solutions for home and business ...