nach oben

Erschienen in:

2018 | OriginalPaper | Buchkapitel

35. Defense Methods Against Social Engineering Attacks

verfasst von : Jibran Saleem, Mohammad Hammoudeh

Erschienen in: Computer and Network Security Essentials

Verlag: Springer International Publishing

Einloggen

Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.

search-config

KI-gestützte Suche

Aus

Abstract

In this chapter, multiple Social Engineering defense methods are comprehensively reviewed. Focus has been placed on examining data, which supports the hypothesis that security awareness is one of the key strengths one can develop, to assist themselves and others, in avoiding and countering increased Social Engineering attacks in this day and age. Various case studies have also been analyzed and evaluated, which demonstrates positive impact on the security outlook of employees, once continuous and sufficient security training is delivered. Evidences of effective counter-techniques have been gathered using a variety of sources, all of which can be employed by businesses and individuals to deter and prevent Social Engineering attacks from taking place.

Sie haben noch keine Lizenz? Dann Informieren Sie sich jetzt über unsere Produkte:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

über 102.000 Bücher
über 537 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Finance + Banking
Management + Führung
Marketing + Vertrieb
Maschinenbau + Werkstoffe
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 390 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Maschinenbau + Werkstoffe

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 340 Zeitschriften

aus folgenden Fachgebieten:

Bauwesen + Immobilien
Business IT + Informatik
Finance + Banking
Management + Führung
Marketing + Vertrieb
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Vorheriges Kapitel A Cognitive and Concurrent Cyber Kill Chain Model

Mitnick, K. (2005). Art of intrusion C: The real stories behind the exploits of hackers, intruders and deceivers (1st ed.). Princeton: Wiley.

Erbschloe, M. (2004). Physical security for IT (1st ed.). Dorset: Digital Press.

Shoniregun, C. A. (2014). Impacts and risk assessment of Technology for Internet Security (Advances in Information Security) (1st ed.). New York: Springer.

The Chromium Projects. (Unknown). Sandbox FAQ. Available at: https://www.chromium.org/developers/design-documents/sandbox/Sandbox-FAQ. Accessed 11 July 2016.

Mozilla Wiki. (Unknown). Security/Sandbox. Available at: https://wiki.mozilla.org/Security/Sandbox. Accessed 11 July 2016.

Lu, L., Yegneswaran, V., Porras, P., & Lee, W. (2010). BLADE: An attack-agnostic approach for preventing drive-by malware infections. Available at: http://ants.iis.sinica.edu.tw/3bkmj9ltewxtsrrvnoknfdxrm3zfwrr/17/BLADE-ACM-CCS-2010.pdf. Accessed 11 July 2016.

Stringhini, G., & Thonnard, O. (2015). That ain’t you: Blocking spearphishing through behavioral modelling. Available at: http://www0.cs.ucl.ac.uk/staff/G.Stringhini/papers/spearphishing-dimva2015.pdf. Accessed 11 July 2016.

Mitnick, K., & Simon, W. (2002). The art of deception. Indianapolis: Wiley.

Heartfield, R., & Loukas, G. (2015). A taxonomy of attacks and a survey of defence mechanisms for semantic social engineering attacks. ACM Computing Surveys, 48(3), 37.CrossRef

10.

Suehring, S. (2015). Linux firewalls: Enhancing security with Nftables and beyond (4th ed.). Boston: Addison Wesley.

11.

Navigant. (2014). Cyber security trends for 2014—Part 1. Available at: http://www.navigant.com/insights/hot-topics/technology-solutions-experts-corner/cyber-security-trends-2014-part-1/. Accessed 12 August 2016.

12.

Mendelsohn, T. (2016). More than half of UK firms have been hit by ransomware—Report. Available at: http://arstechnica.co.uk/security/2016/08/more-than-half-of-uk-firms-have-been-hit-by-ransomware-report/. Accessed 12 August 2016.

13.

Ashford, W. (2016). One in five businesses hit by ransomware are forced to close, study shows. Available at: http://www.computerweekly.com/news/450301845/One-in-five-businesses-hit-by-ransomware-are-forced-to-close-study-shows. Accessed 12 August 2016.

14.

Kohn, A. (2014). Brain science: The forgetting curve–the dirty secret of corporate training. Available at: http://www.learningsolutionsmag.com/articles/1379/brain-science-the-forgetting-curvethe-dirty-secret-of-corporate-training. Accessed 13 August 2016.

15.

Robling, G., & Muller, M. (2009). Social engineering: a serious underestimated problem. Available at: https://www.researchgate.net/publication/220807213_Social_engineering_a_serious_underestimated_problem. Accessed 13 August 2016.

16.

Gragg, D. (2002). A multi-level defense against social engineering. Available at: https://www.sans.org/reading-room/whitepapers/engineering/multi-level-defense-social-engineering-920. Accessed 15 August 2016.

17.

Granger, S. (2002). Social engineering fundamentals, part II: Combat strategies. Available at: http://www.symantec.com/connect/articles/social-engineering-fundamentals-part-ii-combat-strategies . Accessed 15 August 2016.

18.

Smith, M. (2006). The importance of employee awareness to information security. Available at: http://digital-library.theiet.org/content/conferences/10.1049/ic_20060320. Accessed 16 August 2016.

19.

Talib, S., Clarke, N. L., & Furnell, S. M. (2010). An analysis of information security awareness within home and work environments. Available at: http://ieeexplore.ieee.org/xpl/login.jsp?tp=&arnumber=5438096&url=http%3A%2F%2Fieeexplore.ieee.org%2Fxpls%2 Fabs _all.jsp%3Farnumber%3D5438096. Accessed 16 August 2016.

20.

ENISA. (2010). The new users’ guide: How to raise information security awareness (EN). Available at: https://www.enisa.europa.eu/publications/archive/copy_of_new-users-guide. Accessed 16 August 2016.

21.

Palmer, K., & McGoogan, C. (2016). TalkTalk loses 101,000 customers after hack. Available at: http://www.telegraph.co.uk/technology/2016/02/02/talktalk-loses-101000-customers-after-hack/. Accessed 17 August 2016.

22.

KnowBe4. (2016). CASE STUDY Financial Institution. Available at: https://cdn2.hubspot.net/hubfs/241394/Knowbe4-May2015-PDF/CaseStudy_Financials.pdf?t=1471185563903. Accessed 17 August 2016.

23.

Eminagaoglu, M., Ucar, E., & Eren, S. (2010). The positive outcomes of information security awareness training in companies e A case study. Available at: http://www.csb.uncw.edu/people/cummingsj/classes/mis534/articles/Ch5UserTraining.pdf. Accessed 17 August 2016.

24.

ISO. (2013). ISO/IEC 27001:2005. Available at: http://www.iso.org/iso/catalogue_detail?csnumber=42103. Accessed 17 August 2016.

25.

Wombat. (2016). Global manufacturing company reduces malware infections by 46%. Available at: https://info.wombatsecurity.com/hs-fs/hub/372792/file-2557238064-pdf/WombatSecurity_CaseStudy_Manufacturing_46PercentMalwareReduction_090815.pdf? submissionGuid=ffd67461-ca8b-4466-9d8b-a4ad57a5d9df. Accessed 18 August 2016.

Titel: Defense Methods Against Social Engineering Attacks
verfasst von: Jibran Saleem
Mohammad Hammoudeh
Verlag: Springer International Publishing
Buch: Computer and Network Security Essentials
Print ISBN: 978-3-319-58423-2

Electronic ISBN: 978-3-319-58424-9

Copyright-Jahr: 2018
DOI: https://doi.org/10.1007/978-3-319-58424-9_35

Neuer Inhalt

Bildnachweise

VDI-Icon, Profil Icon, inhalt2, Springer Professional Modul/© Springer Fachmedien Wiesbaden GmbH, Nachhaltigkeitsaward Key Visual/© Cometis AG/Global ESG Monitor | Daniel Rupp | Generiert mit KI, Search Icon, Banner Hanser, Jonas Klose/© Pine Valley Capital GmbH, Carina Kießling von der Strategieberatung Roland Berger/© Monika Walther Fotografie | ATZ, Beijing Auto Show 2024: Deutsche Hersteller wollen angreifen./© EKH-Pictures / Generated with AI / Stock.adobe.com, Zeitschrift Wissensmanagement Cover, PatentFit-Logo/© Springer Fachmedien Wiesbaden GmbH, Zukunftswerkstatt Sales Excellence 2024/© AndreyPopov / Getty Images / iStock, 2023_Antrieb/© supervisuell, ATZ-Webinar: Prototypenfreie Entwicklung durch Offline- und Driver-in-the-Loop-HiL-Tests /© (c) VI-grade

Springer Professional

Abstract

Bitte loggen Sie sich ein, um Zugang zu Ihrer Lizenz zu erhalten.

Sie haben noch keine Lizenz? Dann Informieren Sie sich jetzt über unsere Produkte:

Springer Professional "Wirtschaft+Technik"

Springer Professional "Technik"

Springer Professional "Wirtschaft"

Neuer Inhalt

Bitte loggen Sie sich ein, um Zugang zu Ihrer Lizenz zu erhalten.

Bitte loggen Sie sich ein, um Zugang zu Ihrer Lizenz zu erhalten.