I Characterize Myself As A Retired Hacker.

Social Engineering Is Using Deception, Manipulation And Influence To Convince A Human Who Has Access To A Computer System To Do Something, Like Click On An Attachment In An E-mail.

You Can Never Protect Yourself 100%. What You Do Is Protect Your Self As Much As Possible And Mitigate Risk To An Acceptable Degree. You Can Never Remove All Risk.

Of Course I'm Sure Half The People There Hate Me And Half The People Like Me

The Methods That Will Most Effectively Minimize The Ability Of Intruders To Compromise Information Security Are Comprehensive User Training And Education. Enacting Policies And Procedures Simply Won't Suffice. Even With Oversight The Policies And Procedures May Not Be Effective: My Access To Motorola, Nokia, Att, Sun Depended Upon The Willingness Of People To Bypass Policies And Procedures That Were In Place For Years Before I Compromised Them Successfully.

Back In My Day, I Would Probe By Hand. Now You Can Get Commercial Software That Does The Job For You.