Social Engineering Blogs

An Aggregator for Blogs About Social Engineering and Related Fields

Security Awareness Content: The Viral Video

How did a Korean pop artist become THE most viewed video on YouTube, and become an instant sensation in a country that does not speak Korean?

psy-gangnam-style-danceThe power of viral videos.

The propensity for people to see a video, post it on their Facebook, Tweet it, email it to friends, and show it to everyone that passes by their computer has given people like Rebecca Black, Justin Bieber and dancing babies the ability to be famous!

You can reach millions of people in days if you can harness the power of the viral video. So why not use it within your organization? Would it work to reach users about USB drives or is this just reserved for teen pop and dancing babies?

Our security behavior design team at MAD security decided to test this question. We took the concept of the ‘funny cat video’, applied it to USB drives, and voila the buddy video was born. Soon we were going onsite to talk to potential clients and they would ask “hey, can I see the cat video?” People that we had not even engaged yet had heard about our viral USB video.

Maybe it was a fluke? Does this only work for cats?

We tested again, but this time we made the HR Lady video. We showed it to a few people at RSA and suddenly our sales team was flooded with emails like “We have to have that video!”, “How do I get that sort of content for my organization?” and “Do you have more?”

So there you have it, viral videos are NOT just for teen pop, dancing babies, and some crazy Korean guy dancing on an imaginary horse.

So how do we use them in our security awareness architecture?

Justin Beiber Visits Live At MuchMusic - Toronto, ON

Appealing to Your Audience

A viral video is a very unique medium. It is something that is short and usually funny.

Come on, Justin Bieber videos are funny….the first few times

It also speaks to a topic that appeals to many. So how do we harness this in our security awareness content? Find out what your users find funny. Once you have figured out your hitch make sure you and the creator(s) are not the ONLY people that find it funny. Going off the humor of some esoteric show only seen on hulu – that development team happens to love- will not get you the impact you are looking for. These types of videos need the eyes and input of many to know if it’s going to work. Ideally, you should be able to send this to 100 of your closest friends and co-workers- inside and OUTSIDE of InfoSec- and get at least a chuckle from everyone.

Make a Lasting Message

One of the major things to consider when making a viral video is ‘what is the shelf life of this joke?’ If the topic of the video is extremely specific, you run the risk of basing your video on a 2 month fad…and for all that know how long it take to make a video- that joke will be dead before the video is released. A good viral video appeals to many, but isn’t sooooo specific that it only appeals to them for 30 days.

See Jessica Black- Friday. She went viral and then dropped off the face of the earth…thank goodness.

Picking topics that may change over time but still remain funny are good. Appeal to an intrinsic humor, not just the latest fad.

SUPPLEMENTAL Not Foundational

Knowing the effect of viral videos is not ground breaking, but being able to apply it properly is. To this note, viral videos canNOT be used as foundational training videos. Think about it, if you made every one of your 20 training video some slant on cat memes how quickly would it take for that to get old to the users? My bet is pretty quick. Your users will quickly become desensitized to that type of humor and your training has suddenly become ignored. Furthermore, you can’t use the viral video for what it’s best at, REMINDING! Viral videos aren’t for presenting large amounts of information; they are for getting a message stuck in the viewers head!

-How many of you have Gangnum style, that Friday song, Bieber, or that dancing baby stuck in your head? I’d guess at least a few.

Viral videos, and concepts, are a powerful tool. Not applying them to your security awareness content plan is just as short sided as not using email as a medium to communicate with users.

Also, they are pretty fun to make!

 successKid-Viral

Telling Lies

© Galina Barskaya | Dreamstime Stock Photos

Some kids lie about everything, others only lie when trying to avoid punishment while a select few can be brutally honest.  We all lie and most parents know that their kids lie too, but why?  Huff Post “parents” reports on the facts about children and lying.

One mom had this experience and commented, “[what bothered me the most was show adamantly he would insist they weren’t lies] It’s not like I’d preferred if he as a good liar, but it was confusing that he chose to lie about things he a) didn’t need to lie about and b) that were so easy to call him out on.”

Research has revealed that lying, more specifically, learning to lie and experimenting with lying is a natural part of growing up and maturing cognitively.

According to various studies conducted by Canadian researcher Kang Lee. Some lying is “healthy” lying — fantasy and imagination at work, like a four-year-old’s lie about her teddy bear telling her a secret. Other lies are “white lies” told to benefit another or to avoid hurting someone’s feelings, and which tend to start around age six. Most lies kids — and, for that matter, adults — tell are more self-serving, however, and told to avoid trouble or punishment. This sort of lie from a three-year-old might come out as “someone else” spilling the apple juice on the living room rug. A 10-year-old who’s insecure about his math abilities might lie about having already done his math homework.

What about the kid who lies just for the fun it ?

Some studies suggest that children with better cognitive abilities tend to lie more, since lying requires first keeping the truth in mind and then manipulating that information. The ability to lie successfully requires even more in the way of thinking and reasoning.

Lying proficiency has also been linked to good social skills later on, in adolescence.

How do you deal with the latter type of lie?

Huff Post suggests the first step in figuring out how to address a lie is to consider why your child (or adult for that matter)is telling it.

Is the child trying to avoid trouble? Save face? Is he old enough to understand that lying is wrong? A three-year-old who won’t cop to coloring on the wall knows that wall coloring is bad, but may not quite understand that lying about it isn’t.  In such a case, instead of threatening him with punishment, gently point out that you think he may know more than he is letting on, and then thank and praise him if he comes clean.This can foster more truth-telling in the future.

Don’t set kids or adults up to lie.  If you know a child has spilled milk on the living room rug because you saw it happen, don’t ask her if she spilled milk on the rug. Instead, ask her why it happened. If you know your 16-year-old has been smoking because you found cigarettes in his car, don’t ask him if he’s smoking.  Ask him when he started.

Try to head lying off at the pass: If you sense a lie is coming, say, “It makes me happy when you tell me the truth.” And keep in mind yourself that lying is different from not sharing. With kids of any age, help encourage the notion of truth telling by practicing it yourself.  Most adults issue “harmless” lies all day long, within earshot of children.

Do you have any tricks of the trade when it comes to trying to illicit the Truth?
Share them with the Humintell Community.