|
In computer security, shoulder surfing refers to using direct observation techniques, such as looking over someone's shoulder, to get information. It is commonly used to obtain passwords, PINs, security codes, and similar data. ==Occurrence== Shoulder surfing is particularly effective in crowded places because it is relatively easy to observe someone as they: * fill out a form * enter their PIN at an automated teller machine or a POS terminal * use a telephone card at a public payphone * enter a password at a cybercafe, public and university libraries, or airport kiosks * enter a code for a rented locker in a public place such as a swimming pool or airport * enter a PIN or password on their smartphone * public transport is a particular area of concern. 〔(【引用サイトリンク】title=Government Minister avoids the train over visual data security fears )〕 Shoulder surfing can also be done at a distance using binoculars or other vision-enhancing devices. Inexpensive, miniature closed-circuit television cameras can be concealed in ceilings, walls or fixtures to observe data entry. To prevent shoulder surfing, it is advised to shield paperwork or the keypad from view by using one's body or cupping one's hand. Secure, the European Association for Visual Data Security, recommends that when you are in a situation with heightened risk, take steps to protect yourself by angling your screen away from the gazes of other people or using a special privacy screen shield to reduce the visibility of your screen. Secure also recommends that corporate IT security guidance includes directions on how to mitigate these threats. This could include the adoption of ISO/IEC 27001. You should also ensure that staff are properly educated to the risks involved with accessing information. A survey of IT professionals in a white paper for Secure found that: *85% of those surveyed admitted to seeing sensitive information on screen that they were not authorised to see *82% admitted that it was possible information on their screens could have been viewed by unauthorised personnel *82% had little or no confidence that users in their organisation would protect their screen from being viewed by unauthorised people. 抄文引用元・出典: フリー百科事典『 ウィキペディア（Wikipedia）』 ■ウィキペディアで「Shoulder surfing (computer security)」の詳細全文を読む スポンサード リンク
|