Social engineering in cybersecurity: The evolution of a concept

Hatfield, Joseph M.

doi:10.1016/j.cose.2017.10.008

Cited by 88 publications

(58 citation statements)

References 74 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Baiting 1,4,8,13,15,21 In Baiting, attacker instead of using electronic medium uses a physical medium to attack. For example, delivering the infected USB drive in organizational surroundings once opened by the employee will infect the device Shoulder surfing 4,10,14,16,21,24 As the name suggests, attacker gathers information by seeing from the shoulder of a victim.…”

Section: Social Engineering Attacks References Explanationmentioning

confidence: 99%

“…An attacker tries to gather information from victims device using shoulder surfing Dumpster diving 4,10,14,16,21,25 In this type of attack, an attacker collects information from the dustbin or waste bins of an organization. Usually, in an organization, the employees and higher management dispose of important documents without using a shredder.…”

Section: Social Engineering Attacks References Explanationmentioning

confidence: 99%

“…1 Proper education of people is required to better counter social engineering attacks. 14 Some of the strategies which help in mitigating cyber attacks are: (a) security awareness training, (b) revised security policies and practices, (c) network restrictions, and (d) company website review. 1 Furthermore, possible ways to mitigate human-based attacks or social engineering attacks are: (a) by implementing policies; (b) audits (pen-testing); and (c) security awareness programs.…”

mentioning

confidence: 99%

“…10 In future, the emerging challenge is to address the automatic cyber attack techniques which are backed by machine learning techniques using latest attack strategies as knowledge base. 14 For the reader and practitioners, CAPEC (Common Attack Pattern Enumeration and Classification) can be a source of information for researchers and practitioners regarding latest social engineering attacks and other relevant information. 15…”

mentioning

confidence: 99%

See 3 more Smart Citations

Contemplating social engineering studies and attack scenarios: A review study

Yasin

Fatima

Liu

et al. 2019

Security and Privacy

View full text Add to dashboard Cite

The previous year has seen an enormous increase in the studies related to social engineering. This increase is partly due to increasing number of social engineering attacks and partly due to people's inability to identify the attack. Thus, it is of great importance to find solutions which are helpful for human to understand the social engineering attacks and scenarios. To address this, we have performed a literature review of studies (on social engineering) in top-notch journals and conferences. In this paper, we have enlisted the types of attacks, and the persuasion techniques used by social engineers as listed in the literature. We also combined different theories which researchers tried to use to explain various activities of social engineers. Furthermore, we have mentioned that a better understanding of the social engineering attack scenarios can be done using thematic and game-based analysis techniques.Preliminary empirical evaluation of the proposed game based method shows overall neutral results. Future extension and evaluation is needed for the proposed methods. K E Y W O R D Scybercrime, cyber-security, human factors, human-centered, information security, review, social engineering

show abstract

Section: Social Engineering Attacks References Explanationmentioning

confidence: 99%

Section: Social Engineering Attacks References Explanationmentioning

confidence: 99%

mentioning

confidence: 99%

mentioning

confidence: 99%

See 2 more Smart Citations

Contemplating social engineering studies and attack scenarios: A review study

Yasin

Fatima

Liu

et al. 2019

Security and Privacy

View full text Add to dashboard Cite

show abstract

“…Recently it has entered the field of computer and information security as an umbrella term for a variety of techniques that are used to manipulate people into divulging confidential information (e.g., deception by phone) or compromise people's security and privacy in cyberspace (e.g., phishing emails) [34][35][36]. Social engineering in this sense is clearly relevant here since robots can be hacked for criminal or malicious purposes.…”

Section: Should Roboethics Be An Instrument Of (Political) Social Engmentioning

confidence: 99%

Engineering Cheerful Robots: An Ethical Consideration

Jones

2018

Information

View full text Add to dashboard Cite

Socially interactive robots in a variety of forms and function are quickly becoming part of everyday life and bring with them a host of applied ethical issues. This paper concerns meta-ethical implications at the interface among robotics, ethics, psychology, and the social sciences. While guidelines for the ethical design and use of robots are necessary and urgent, meeting this exigency opens up the issue of whose values and vision of the ideal society inform public policies. The paper is organized as a sequence of questions: Can robots be agents of cultural transmission? Is a cultural shift an issue for roboethics? Should roboethics be an instrument of (political) social engineering? How could biases of the technological imagination be avoided? Does technological determinism compromise the possibility of moral action? The answers to these questions are not straightforwardly affirmative or negative, but their contemplation leads to heeding C. Wright Mills' metaphor of the cheerful robot.

show abstract

Cybersecurity awareness in Zimbabwean universities: Perspectives from the students

Matyokurehwa

Rudhumbu

Gombiro

et al. 2020

Security and Privacy

View full text Add to dashboard Cite

The study investigated the cybersecurity awareness (CSA) in Zimbabwean universities from the perspectives of the students. The study hypothesized a model to proffer theoretical and practical solutions to higher education students on cybersecurity training programs. The paper used a positivist approach to test three hypotheses on CSA among Zimbabwe universities. To test the hypothesized model, a total of 322 questionnaires were distributed among three universities in Zimbabwe. Descriptive and inferential statistics were used to test the data. ANOVA tests and regressions were used to test three hypotheses from the hypothesized model. Chi square was used for cross‐case analysis to test relationships between age, gender, education level, and institution on recoded variable CSA. The findings reveal that the social engineering attacks, malware attacks, and the internet of things attacks are all positively related to CSA findings from cross‐case analysis indicated that there were no differences on gender and age on CSA while there were differences on education level and institution on CSA. The findings from this study have implications for decision‐makers to come up with policies concerning CSA in the higher education sector.

show abstract

Social engineering in cybersecurity: The evolution of a concept

Cited by 88 publications

References 74 publications

Contemplating social engineering studies and attack scenarios: A review study

Contemplating social engineering studies and attack scenarios: A review study

Engineering Cheerful Robots: An Ethical Consideration

Cybersecurity awareness in Zimbabwean universities: Perspectives from the students

Contact Info

Product

Resources

About