arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 1507.02458cs.CRcs.CY

Towards a Security Lifecycle Model against Social Engineering Attacks: SLM-SEA

Tolga Mataracioglu, Sevgi Ozkan, Ray Hackney

英文摘要:

This research considers the impact of social engineering security attacks which are noted as taking opportunities for critically exploiting user awareness and behavior. The research proposes in this respect a managerial method in an attempt to enhance or even ensure protection. The aim of this study is to construct a security lifecycle model against these eventualities and to analyze the test results that have been carried out within the context of the Turkish public sector. The main objective of the study is to determine why employees shared sensitive information by stating fallacies and related amendments through interviews and thus to understand user actions when they are face to face with a real social engineering attack. The research findings demonstrate that employees in Turkish public organizations are not sufficiently aware of information security and they generally ignore critically important security procedures. This represents an important illustration of the increasing need for further generalized user awareness and responsibilities where individuals and not simply software form a critical element of the security protection portfolio.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑