Social engineering focuses on the weakest link of the information security chain, and considered a big security threat, according to CERT. One of the basic laws of information security is that `Client-Side Security Doesn`t Work`, or more precisely, as Scott Culp says: “The basic problem with client-side security is that the person sitting physically in front of the client has absolute control over it”, and “If a bad guy has unrestricted physical access to your computer, it`s not your computer anymore”. Social engineering attack uses the fact that the human part of the security is the most essential. Moreover, there is not a single computer system in the world that does not rely on humans. This is why this security weakness is independent of platform, software, network, firewalls, VPNs etc. Full Story