NDLI: Social engineering attack framework

Content Provider	IEEE Xplore Digital Library
Author	Mouton, F. Malan, M.M. Leenen, L. Venter, H.S.
Copyright Year	2014
Description	Author affiliation: Dept. of Comput. Sci., Univ. of Pretoria, Tshwane, South Africa (Venter, H.S.) \|\| Defence Peace Safety & Security, Council for Ind. & Sci. Res., Tshwane, South Africa (Mouton, F.; Leenen, L.) \|\| Inf. & Comput. Security Archit., Univ. of Pretoria, Tshwane, South Africa (Malan, M.M.)
Abstract	The field of information security is a fast growing discipline. Even though the effectiveness of security measures to protect sensitive information is increasing, people remain susceptible to manipulation and the human element is thus a weak link. A social engineering attack targets this weakness by using various manipulation techniques in order to elicit sensitive information. The field of social engineering is still in its infancy stages with regards to formal definitions and attack frameworks. This paper proposes a social engineering attack framework based on Kevin Mitnick's social engineering attack cycle. The attack framework addresses shortcomings of Mitnick's social engineering attack cycle and focuses on every step of the social engineering attack from determining the goal of an attack up to the successful conclusion of the attack. The authors use a previously proposed social engineering attack ontological model which provides a formal definition for a social engineering attack. The ontological model contains all the components of a social engineering attack and the social engineering attack framework presented in this paper is able to represent temporal data such as flow and time. Furthermore, this paper demonstrates how historical social engineering attacks can be mapped to the social engineering attack framework. By combining the ontological model and the attack framework, one is able to generate social engineering attack scenarios and to map historical social engineering attacks to a standardised format. Scenario generation and analysis of previous attacks are useful for the development of awareness, training purposes and the development of countermeasures against social engineering attacks.
Starting Page	1
Ending Page	9
File Size	1748326
Page Count	9
File Format	PDF
e-ISBN	9781479933846
DOI	10.1109/ISSA.2014.6950510
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2014-08-13
Publisher Place	South Africa
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Bidirectional Communication Social Engineering Buildings Vectors Social Engineering Attack Framework Electronic mail Indirect Communication Ontological Model Social Engineering Attack Mitnick's Attack Cycle Information security Ash Data models Unidirectional Communication
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Libarray of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Social Engineering Attack Detection Model: SEADMv2

Towards an Ontological Model Defining the Social Engineering Domain

Victim Communication Stack (VCS): A flexible model to select the Human Attack Vector

A Context-Based Integrity Framework

A Data-Reachability Model for Elucidating Privacy and Security Risks Related to the Use of Online Social Networks

Trials of wireless, secure electronic mail

An analysis approach for multi-stage network attacks

A new Chinese wall security policy model based on the subject's wall and object's wall

Discovering Latent Behavioral Roles in Dynamic Social Networks

Social engineering attack framework

Similar Documents

Social Engineering Attack Detection Model: SEADMv2

Towards an Ontological Model Defining the Social Engineering Domain

Victim Communication Stack (VCS): A flexible model to select the Human Attack Vector

A Context-Based Integrity Framework

A Data-Reachability Model for Elucidating Privacy and Security Risks Related to the Use of Online Social Networks

Trials of wireless, secure electronic mail

An analysis approach for multi-stage network attacks

A new Chinese wall security policy model based on the subject's wall and object's wall

Discovering Latent Behavioral Roles in Dynamic Social Networks

Social engineering attack framework