Repository logo
 
Publication

Information security threat assessment using social engineering in the organizational context: literature review

2022-04Conference object Open access
Simple item page
dc.contributor.authorLopes, António
dc.contributor.authorReis, Leonilde
dc.contributor.authorSão Mamede, Henrique
dc.contributor.authorSantos, Arnaldo
dc.date.accessioned2022-04-20T10:11:16Z
dc.date.available2022-04-20T10:11:16Z
dc.date.issued2022-04
dc.descriptionTrabalho apresentado em WorldCist'22 - 10th World Conference on Information Systems and Technologies, 12-14 abril 2022, Budva, Montenegropt_PT
dc.description.abstractDue to the value and diversity of data that organizations use and pro duce in their activity, it is extremely important to protect this asset. Security flaws can arise due to several factors and whenever it is difficult to access the desired information because of technological barriers. In this case, attacks are redirected to the exploitation of human beings vulnerabilities through various techniques. The objective of this work focuses on literature review, studying the underlying theme of Social Engineering, as it uses human trust, convincing someone of something fake, using various interactions and different vectors to gain access to private information. Design Science Research will support the research work due to the possibility of construction, evaluation, and subsequent validation of the artefact. The contribution of a framework proposal for preventing social engi neering attacks in organizations and providing the best recommendations, guid ing, and supporting the stakeholders in the selection and definition of controls that guarantee the security of organizational information and avoid possible at tacks by Social Engineering. It is expected that the practical effects of the future work will result in a reduction in the number of attacks using Social Engineering, greater individual and collective preparation to deal with this problem and, over time, the incentive to the continued expansion of the adoption of these artefacts at the organizational level.pt_PT
dc.description.versionN/Apt_PT
dc.identifier.urihttp://hdl.handle.net/10400.26/40242
dc.language.isoengpt_PT
dc.subjectSocial Engineeringpt_PT
dc.subjectInformation Securitypt_PT
dc.subjectInformation Systemspt_PT
dc.subjectInformation and Communication Technologiespt_PT
dc.titleInformation security threat assessment using social engineering in the organizational context: literature reviewpt_PT
dc.typeconference object
dspace.entity.typePublication
person.familyNameReis
person.givenNameLeonilde
person.identifier.ciencia-idB61D-AF04-BEF3
rcaap.rightsopenAccesspt_PT
rcaap.typeconferenceObjectpt_PT
relation.isAuthorOfPublication1695b192-99bb-47e0-8f5e-12e4e69ab5c2
relation.isAuthorOfPublication.latestForDiscovery1695b192-99bb-47e0-8f5e-12e4e69ab5c2

Files

Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
FINAL jan o8 2022 080122 WorldCIST22 Submission ID 161 - Social Engeneering.pdf
Size:
597 KB
Format:
Adobe Portable Document Format
Download

Collections

IPS - ESCE – DSI - Comunicações em congressos