Social engineering attack strategies and defence approaches

Ibrahim Ghafir; Vaclav Prenosil; Ahmad Alhejailan; Mohammad Hammoudeh

doi:10.1109/FiCloud.2016.28

Social engineering attack strategies and defence approaches

Ibrahim Ghafir, Vaclav Prenosil, Ahmad Alhejailan, Mohammad Hammoudeh

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

53 Scopus citations

Abstract

This paper examines the role and value of information security awareness efforts in defending against social engineering attacks. It categories the different social engineering threats and tactics used in targeting employees and the approaches to defend against such attacks. While we review these techniques, we attempt to develop a thorough understanding of human security threats, with a suitable balance between structured improvements to defend human weaknesses, and efficiently focused security training and awareness building. Finally, the paper shows that a multi-layered shield can mitigate various security risks and minimize the damage to systems and data.

Original language	English
Title of host publication	Proceedings - 2016 IEEE 4th International Conference on Future Internet of Things and Cloud, FiCloud 2016
Editors	Irfan Awan, Winston Seah, Muhammad Younas
Publisher	Institute of Electrical and Electronics Engineers Inc.
Pages	145-149
Number of pages	5
ISBN (Electronic)	9781509040520
DOIs	https://doi.org/10.1109/FiCloud.2016.28
State	Published - 23 Sep 2016
Externally published	Yes

Publication series

Name	Proceedings - 2016 IEEE 4th International Conference on Future Internet of Things and Cloud, FiCloud 2016

Bibliographical note

Publisher Copyright:
© 2016 IEEE.

Keywords

Cyber security
Security Awareness
Social Engineering

ASJC Scopus subject areas

Computer Networks and Communications
Computer Science Applications

Access to Document

10.1109/FiCloud.2016.28

Cite this

Ghafir, I., Prenosil, V., Alhejailan, A., & Hammoudeh, M. (2016). Social engineering attack strategies and defence approaches. In I. Awan, W. Seah, & M. Younas (Eds.), Proceedings - 2016 IEEE 4th International Conference on Future Internet of Things and Cloud, FiCloud 2016 (pp. 145-149). Article 7575856 (Proceedings - 2016 IEEE 4th International Conference on Future Internet of Things and Cloud, FiCloud 2016). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/FiCloud.2016.28

Ghafir, Ibrahim ; Prenosil, Vaclav ; Alhejailan, Ahmad et al. / Social engineering attack strategies and defence approaches. Proceedings - 2016 IEEE 4th International Conference on Future Internet of Things and Cloud, FiCloud 2016. editor / Irfan Awan ; Winston Seah ; Muhammad Younas. Institute of Electrical and Electronics Engineers Inc., 2016. pp. 145-149 (Proceedings - 2016 IEEE 4th International Conference on Future Internet of Things and Cloud, FiCloud 2016).

@inproceedings{bcaf9536b419473ebd1f3c0c41edb176,

title = "Social engineering attack strategies and defence approaches",

abstract = "This paper examines the role and value of information security awareness efforts in defending against social engineering attacks. It categories the different social engineering threats and tactics used in targeting employees and the approaches to defend against such attacks. While we review these techniques, we attempt to develop a thorough understanding of human security threats, with a suitable balance between structured improvements to defend human weaknesses, and efficiently focused security training and awareness building. Finally, the paper shows that a multi-layered shield can mitigate various security risks and minimize the damage to systems and data.",

keywords = "Cyber security, Security Awareness, Social Engineering",

author = "Ibrahim Ghafir and Vaclav Prenosil and Ahmad Alhejailan and Mohammad Hammoudeh",

note = "Publisher Copyright: {\textcopyright} 2016 IEEE.",

year = "2016",

month = sep,

day = "23",

doi = "10.1109/FiCloud.2016.28",

language = "English",

series = "Proceedings - 2016 IEEE 4th International Conference on Future Internet of Things and Cloud, FiCloud 2016",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

pages = "145--149",

editor = "Irfan Awan and Winston Seah and Muhammad Younas",

booktitle = "Proceedings - 2016 IEEE 4th International Conference on Future Internet of Things and Cloud, FiCloud 2016",

address = "United States",

}

Ghafir, I, Prenosil, V, Alhejailan, A & Hammoudeh, M 2016, Social engineering attack strategies and defence approaches. in I Awan, W Seah & M Younas (eds), Proceedings - 2016 IEEE 4th International Conference on Future Internet of Things and Cloud, FiCloud 2016., 7575856, Proceedings - 2016 IEEE 4th International Conference on Future Internet of Things and Cloud, FiCloud 2016, Institute of Electrical and Electronics Engineers Inc., pp. 145-149. https://doi.org/10.1109/FiCloud.2016.28

Social engineering attack strategies and defence approaches. / Ghafir, Ibrahim; Prenosil, Vaclav; Alhejailan, Ahmad et al.
Proceedings - 2016 IEEE 4th International Conference on Future Internet of Things and Cloud, FiCloud 2016. ed. / Irfan Awan; Winston Seah; Muhammad Younas. Institute of Electrical and Electronics Engineers Inc., 2016. p. 145-149 7575856 (Proceedings - 2016 IEEE 4th International Conference on Future Internet of Things and Cloud, FiCloud 2016).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Social engineering attack strategies and defence approaches

AU - Ghafir, Ibrahim

AU - Prenosil, Vaclav

AU - Alhejailan, Ahmad

AU - Hammoudeh, Mohammad

PY - 2016/9/23

Y1 - 2016/9/23

N2 - This paper examines the role and value of information security awareness efforts in defending against social engineering attacks. It categories the different social engineering threats and tactics used in targeting employees and the approaches to defend against such attacks. While we review these techniques, we attempt to develop a thorough understanding of human security threats, with a suitable balance between structured improvements to defend human weaknesses, and efficiently focused security training and awareness building. Finally, the paper shows that a multi-layered shield can mitigate various security risks and minimize the damage to systems and data.

AB - This paper examines the role and value of information security awareness efforts in defending against social engineering attacks. It categories the different social engineering threats and tactics used in targeting employees and the approaches to defend against such attacks. While we review these techniques, we attempt to develop a thorough understanding of human security threats, with a suitable balance between structured improvements to defend human weaknesses, and efficiently focused security training and awareness building. Finally, the paper shows that a multi-layered shield can mitigate various security risks and minimize the damage to systems and data.

KW - Cyber security

KW - Security Awareness

KW - Social Engineering

UR - https://www.scopus.com/pages/publications/84992146181

U2 - 10.1109/FiCloud.2016.28

DO - 10.1109/FiCloud.2016.28

M3 - Conference contribution

AN - SCOPUS:84992146181

T3 - Proceedings - 2016 IEEE 4th International Conference on Future Internet of Things and Cloud, FiCloud 2016

SP - 145

EP - 149

BT - Proceedings - 2016 IEEE 4th International Conference on Future Internet of Things and Cloud, FiCloud 2016

A2 - Awan, Irfan

A2 - Seah, Winston

A2 - Younas, Muhammad

PB - Institute of Electrical and Electronics Engineers Inc.

ER -

Ghafir I, Prenosil V, Alhejailan A, Hammoudeh M. Social engineering attack strategies and defence approaches. In Awan I, Seah W, Younas M, editors, Proceedings - 2016 IEEE 4th International Conference on Future Internet of Things and Cloud, FiCloud 2016. Institute of Electrical and Electronics Engineers Inc. 2016. p. 145-149. 7575856. (Proceedings - 2016 IEEE 4th International Conference on Future Internet of Things and Cloud, FiCloud 2016). doi: 10.1109/FiCloud.2016.28

Social engineering attack strategies and defence approaches

Abstract

Publication series

Bibliographical note

Keywords

ASJC Scopus subject areas

Access to Document

Fingerprint

Cite this