Social Engineering: The Neglected Human Factor for Information Security Management

View Sample PDF

Author(s): Xin (Robert) Luo (Xin (Robert) LuoThe University of New Mexico, USA), Richard Brody (The University of New Mexico, USA), Alessandro Seazzu (The University of New Mexico, USA)and Stephen Burd (The University of New Mexico, USA)
Copyright: 2013
Pages: 8
Source title: Managing Information Resources and Technology: Emerging Applications and Theories
Source Author(s)/Editor(s): Mehdi Khosrow-Pour, D.B.A. (Information Resources Management Association, USA)
DOI: 10.4018/978-1-4666-3616-3.ch011

Keywords: Information Resources Management / Information Science Reference / Library & Information Science

Purchase

View on the publisher's website for pricing and purchasing information.

Abstract

Effective information systems security management combines technological measures and managerial efforts. Although various technical means have been employed to cope with security threats, human factors have been comparatively neglected. This article examines human factors that can lead to social engineering intrusions. Social engineering is a technique used by malicious attackers to gain access to desired information by exploiting the flaws in human logic known as cognitive biases. Social engineering is a potential threat to information security and should be considered equally important to its technological counterparts. This article unveils various social engineering attacks and their leading human factors, and discusses several ways to defend against social engineering: education, training, procedure, and policy. The authors further introduce possible countermeasures for social engineering attacks. Future analysis is also presented.

The IRMA Community

Research IRM

Social Engineering: The Neglected Human Factor for Information Security Management

Purchase

Abstract

Related Content

IRMA Sponsors