检索结果-南通市图书馆

social engineering Attack-Defense Strategies Based on Reinforcement Learning

Computer Systems Science & engineering 2023年第11期47卷 2153-2170页

作者： Rundong Yang Kangfeng Zheng Xiujuan Wang Bin Wu Chunhua Wu School of Cyberspace Security Beijing University of Posts and TelecommunicationsBeijing100876China School of Computer Science Beijing University of TechnologyBeijing100124China

social engineering attacks are considered one of the most hazardous cyberattacks in cybersecurity,as human vulnerabilities are often the weakest link in the entire network.Such vulnerabilities are becoming increasingly susceptible to network security risks.Addressing the social engineering attack defense problem has been the focus of many studies.However,two main challenges hinder its successful resolution.Firstly,the vulnerabilities in social engineering attacks are unique due to multistage attacks,leading to incorrect social engineering defense strategies.Secondly,social engineering attacks are real-time,and the defense strategy algorithms based on gaming or reinforcement learning are too complex to make rapid decisions.This paper proposes a multiattribute quantitative incentive method based on human vulnerability and an improved Q-learning(IQL)reinforcement learning method on human vulnerability attributes.The proposed algorithm aims to address the two main challenges in social engineering attack defense by using a multiattribute incentive method based on human vulnerability to determine the optimal defense strategy.Furthermore,the IQL reinforcement learning method facilitates rapid decision-making during real-time attacks.The experimental results demonstrate that the proposed algorithm outperforms the traditional Qlearning(QL)and deep Q-network(DQN)approaches in terms of time efficiency,taking 9.1%and 19.4%less time,respectively.Moreover,the proposed algorithm effectively addresses the non-uniformity of vulnerabilities in social engineering attacks and provides a reliable defense strategy based on human vulnerability attributes.This study contributes to advancing social engineering attack defense by introducing an effective and efficient method for addressing the vulnerabilities of human factors in the cybersecurity domain.

关键词： social engineering game theory reinforcement learning Q-learning

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Predicting individuals’vulnerability to social engineering in social networks

引用

Cybersecurity 2018年第1期1卷 710-728页

作者： Samar Muslah Albladi George R.S.Weir College of Computer Science and engineering University of JeddahJeddahKingdom of Saudi Arabia Department of Computer and Information Sciences University of StrathclydeGlasgowUK

The popularity of social networking sites has attracted billions of users to engage and share their information on these networks.The vast amount of circulating data and information expose these networks to several security risks.social engineering is one of the most common types of threat that may face social network users.Training and increasing users’awareness of such threats is essential for maintaining continuous and safe use of social networking services.Identifying the most vulnerable users in order to target them for these training programs is desirable for increasing the effectiveness of such programs.Few studies have investigated the effect of individuals’characteristics on predicting their vulnerability to social engineering in the context of social networks.To address this gap,the present study developed a novel model to predict user vulnerability based on several perspectives of user characteristics.The proposed model includes interactions between different social network-oriented factors such as level of involvement in the network,motivation to use the network,and competence in dealing with threats on the network.The results of this research indicate that most of the considered user characteristics are factors that influence user vulnerability either directly or indirectly.Furthermore,the present study provides evidence that individuals’characteristics can identify vulnerable users so that these risks can be considered when designing training and awareness programs.

关键词： Deception Information security Phishing social engineering social network Vulnerability

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Detecting Phishing Using a Multi-Layered social engineering Framework

引用

Journal of Cyber Security 2023年第1期5卷 13-32页

作者： Kofi Sarpong Adu-Manu Richard Kwasi Ahiable Department of Computer Science University of GhanaLegon-Accra+233Ghana

As businesses develop and expand with a significant volume of data,data protection and privacy become increasingly important.Research has shown a tremendous increase in phishing activities during and after COVID-19.This research aimed to improve the existing approaches to detecting phishing activities on the internet.We designed a multi-layered phish detection algorithm to detect and prevent phishing applications on the internet using URLs.In the algorithm,we considered technical dimensions of phishing attack prevention and mitigation on the internet.In our approach,we merge,Phishtank,Blacklist,Blocklist,and Whitelist to form our framework.A web application system and browser extension were developed to implement the algorithm.The multi-layer phish detector evaluated ten thousandURLs gathered randomly from the internet(five thousand phishing and five thousand legitimate URLs).The system was estimated to detect levels of accuracy,true-positive and false-positive values.The system level accuracy was recorded to be 98.16%.Approximately 49.6%of the websites were detected as illegitimate,whilst 49.8%were seen as legitimate.

关键词： Phishing social engineering multi-layer framework data protection privacy

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

The Role of social engineering in Cybersecurity and Its Impact

引用

Journal of Information Security 2022年第4期13卷 363-379页

作者： Bandar S. Almutairi Abdurahman Alghamdi College of Computing and Information Technology Shaqra University Shaqra Saudi Arabia

An attacker has several options for breaking through an organization’s information security protections. Human factors are determined to be the source of some of the worst cyber-attacks every day in every business. The human method, often known as “social engineering”, is the hardest to cope with. This paper examines many types of social engineering. The aim of this study was to ascertain the level of awareness of social engineering, provide appropriate solutions to problems to reduce those engineering risks, and avoid obstacles that could prevent increasing awareness of the dangers of social engineering—Shaqra University (Kingdom of Saudi Arabia). A questionnaire was developed and surveyed 508 employees working at different organizations. The overall Cronbach’s alpha was 0.756, which very good value, the correlation coefficient between each of the items is statistically significant at 0.01 level. The study showed that 63.4% of the surveyed sample had no idea about social engineering. 67.3% of the total samples had no idea about social engineering threats. 42.1% have a weak knowledge of social engineering and only 7.5% of the sample had a good knowledge of social engineering. 64.7% of the male did not know what social engineering is. 68.0% of the administrators did not know what social engineering is. Employees who did not take courses showed statistically significant differences.

关键词： Cybersecurity Attacks social engineering Security Awareness of Cybersecurity

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

A Human Dimension of Hacking:social engineering through social Media

A Human Dimension of Hacking:Social Engineering through Soci...

引用

作者： Heidi Wilcox Maumita Bhattacharya School of Computing ＆ Mathematics Charles Sturt University

social engineering through social media channels targeting organizational employees is emerging as one of the most challenging information security threats.social engineering defies traditional security efforts due to the method of attack relying on human naiveté or error.The vast amount of information now made available to social engineers through online social networks is facilitating methods of attack which rely on some form of human error to enable infiltration into company networks.While,paramount to organisational information security objectives is the introduction of relevant comprehensive policy and guideline,perspectives and practices vary from global region to region.This paper identifies such regional variations and then presents a detailed investigation on information security outlooks and practices,surrounding social media,in Australian organisations（both public and private）.Results detected disparate views and practices,suggesting further work is needed to achieve effective protection against security threats arsing due to social media adoption.

关键词： social engineering social media Human dimension of hacking Information security

来源： cnki会议评论

在线全文

cnki会议

学校读者我要写书评

暂无评论

NOW, social engineering

引用

大学英语 1992年第2期 34-34页

作者：习之园菊

It is one of the enduring cliches of higher education: the nerdish young man with thick glasses, shirt-pocket protector and socially incorrect conversation the classic engineering student whose dreams and aspirations rarely focus beyond the laboratory test tube or computer workstation. Rut the image of the male engineer as technological nerd is rapidly becoming as outdated as

关键词： MIT NOW social engineering

来源：

同方期刊数据库评论

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

数字新兴议题专门立法热之反思

引用

法理学、法史学 2024年第1期

作者：傅爱竹

数字技术的广泛应用衍生出名目繁多的新兴议题，是否需要以及如何将之法律化是数字时代的新“马法之问”。国内主流舆论与实践倾向于采取专门立法，但其理由难以支持该法律化路径的必要性与正当性。作为专门立法热潮形成的底层逻辑，“... 详细信息

数字技术的广泛应用衍生出名目繁多的新兴议题，是否需要以及如何将之法律化是数字时代的新“马法之问”。国内主流舆论与实践倾向于采取专门立法，但其理由难以支持该法律化路径的必要性与正当性。作为专门立法热潮形成的底层逻辑，“技术风险焦虑症”与“社会工程学思维”蕴藏着对法律规制新技术风险之功能与限度的重大误解。应借鉴“零星的社会工程”作为数字新兴议题法律化路径抉择的基本思路。通过构建由一系列基础规则与例外规则组成的评估框架，即明确释法、修法、专门立法、合并立法等路径的优先顺位及逸脱规则，可以为数字新兴议题法律化路径之抉择提供具体且客观的评判标准。

关键词：数字新兴议题法律化专门立法社会工程　　digital emerging issues legalization specialized legislation social engineering

来源：人大复印报刊资料评论

在线全文

人大复印报刊资料

学校读者我要写书评

暂无评论

Impact of Human Vulnerabilities on Cybersecurity

引用

Computer Systems Science & engineering 2022年第3期40卷 1153-1166页

作者： Maher Alsharif Shailendra Mishra Mohammed AlShehri Department of Information Technology College of Computer and Information SciencesMajmaah UniversityMajmaah11952Saudi Arabia Department of Computer engineering College of Computer and Information SciencesMajmaah UniversityMajmaah11952Saudi Arabia

Today,security is a major challenge linked with computer network companies that cannot defend against cyber-attacks.Numerous vulnerable factors increase security risks and cyber-attacks,including viruses,the internet,communications,and hackers.Internets of Things(IoT)devices are more effective,and the number of devices connected to the internet is constantly increasing,and governments and businesses are also using these technologies to perform business activities effectively.However,the increasing uses of technologies also increase risks,such as password attacks,social engineering,and phishing attacks.Humans play a major role in the field of cybersecurity.It is observed that more than 39%of security risks are related to the human factor,and 95%of successful cyber-attacks are caused by human error,with most of them being insider threats.The major human factor issue in cybersecurity is a lack of user awareness of cyber threats.This study focuses on the human factor by surveying the vulnerabilities and reducing the risk by focusing on human nature and reacting to different situations.This study highlighted that most of the participants are not experienced with cybersecurity threats and how to protect their personal information.Moreover,the lack of awareness of the top three vulnerabilities related to the human factor in cybersecurity,such as phishing attacks,passwords,attacks,and social engineering,are major problems that need to be addressed and reduced through proper awareness and training.

关键词： Cybersecurity phishing attack password attack social engineering cybersecurity awareness security risk

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Hacked by Bits and Pieces: What Can We Learn from an Example of Corporate Espionage?

引用

Journal of Information Security 2021年第3期12卷 224-231页

作者： Jack Schafer Marvin Karlins Western Illinois University Macomb USA MUMA School of Busines University of South Florida Tampa USA

Information security often involves the development and application of sophisticated software to protect sensitive information stored in corporate computers. Yet, in this example of corporate espionage, a clever person, a cellphone and some readily available software were all it took to crack through one company’s advanced security barriers. By reading this article it is hoped that employees at all levels of an organization’s hierarchy will become more aware of—and recognize—how: 1) bits and pieces of seemingly harmless and easy-to-acquire information can be used for sinister purposes;2) building rapport and trust with a person can make them more likely to become unknowing co-conspirators in a devious undertaking;and 3) how one must be constantly alert not to give out information without carefully considering the authenticity and justification of the source requesting it.

关键词： Cyber Security Hacking social engineering Scams Corporate Espionage

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

社会工程是马克思主义理论研究的新领域

马克思列宁主义研究

引用

马克思列宁主义研究 2011年第5期 74-78,100页

作者：李永胜

马克思主义理论有三大基本精神，即改造世界的革命精神、整体辩证思维精神、面向现实的实践精神。这三大基本精神孕育着社会工程思维与范式，马克思主义中国化离不开社会工程的探索与创新，社会工程范式是大科学时代马克思主义把握世界... 详细信息

马克思主义理论有三大基本精神，即改造世界的革命精神、整体辩证思维精神、面向现实的实践精神。这三大基本精神孕育着社会工程思维与范式，马克思主义中国化离不开社会工程的探索与创新，社会工程范式是大科学时代马克思主义把握世界的一种新的方式，它吸取并反映了现代科学众多知识成果与方法。分析指出，社会工程开拓了马克思主义理论应用和发展的新领域，对于丰富和发展马克思主义理论具有重要的意义。

关键词：社会工程马克思主义应用与发展新领域 social engineering Marxism application and development new field

来源：人大复印报刊资料评论

在线全文

人大复印报刊资料

学校读者我要写书评

暂无评论

欢迎您,

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

请选择保存的检索档案：

请选择收藏分类：

通借通还

欢迎您,

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：