Loading...
Publication
Improving social engineering resilience in enterprises
| Name: | Description: | Size: | Format: | |
|---|---|---|---|---|
| 1.26 MB | Adobe PDF |
Advisor(s)
Abstract(s)
A Engenharia Social é um problema significativo para as empresas. Os cyber-criminosos continuam a desenvolver novos e sofisticados métodos para ludibriar indivíduos, levando-os a divulgar informações confidenciais ou a conceder acesso não autorizado a sistemas de infraestruturas. Estes ataques continuam a constituir uma ameaça significativa para os sistemas empresariais, apesar dos investimentos significativos em arquitetura técnica e medidas de segurança. A formação e sensibilização dos funcionários, entre outras intervenções comportamentais, são fundamentais para melhorar a resiliência à Engenharia Social. Os programas de formação e educação dos funcionários são cruciais para a redução da probabilidade destes ataques. O cumprimento das políticas e procedimentos de segurança é significativamente melhorado através de formação baseada na educação. Uma cultura de segurança envolvendo todas as partes é também essencial, uma vez que uma comunicação aberta e honesta por parte da direção pode aumentar a consciência dos funcionários sobre potenciais ameaças. Os preconceitos e características emocionais como o medo, confiança e curiosidade têm também impacto na suscetibilidade a este tipo de ataques, mas, no entanto, as características pessoais que tornam os indivíduos vulneráveis exigem uma investigação profunda.
Esta dissertação tem como objetivo fornecer uma avaliação abrangente do estado do conhecimento neste campo e propor uma Framework, identificando as melhores práticas para melhorar a resiliência à Engenharia Social nas empresas, enquanto apoia o desenvolvimento de novos estudos de investigação para abordar
esta questão. O seu objetivo é ajudar as empresas de qualquer dimensão a utilizar esta Framework para reduzir o risco de ataques bem-sucedidos de Engenharia Social e melhorar a sua cultura de sensibilização para a segurança.
Social Engineering is a significant problem for enterprises. Cybercriminals continue developing new and sophisticated methods to trick individuals into disclosing confidential information or granting unauthorized access to infrastructure systems. These attacks remain a significant threat to enterprise systems despite significant investments in technical architecture and security measures. User awareness training and other behavioral interventions are critical for improving Social Engineering resilience. Training and education programs for users are crucial in reducing the probability of these attacks. Compliance with security policies and procedures is significantly improved through education-based training. A security culture involving all stakeholders is also essential, as open, and honest communication from management can increase user awareness of potential threats. Emotional biases such as fear, trust, and curiosity also impact susceptibility to attacks, but personal traits that make individuals vulnerable require further investigation. This dissertation aims to provide a comprehensive assessment of the state of knowledge in this field and propose a framework by identifying best practices for improving Social Engineering resilience in organizations, while supporting the development of new research studies to address this issue. Its goal is to help enterprises of any size leverage this framework to reduce the risk of successful Social Engineering attacks and improve their culture of security awareness.
Social Engineering is a significant problem for enterprises. Cybercriminals continue developing new and sophisticated methods to trick individuals into disclosing confidential information or granting unauthorized access to infrastructure systems. These attacks remain a significant threat to enterprise systems despite significant investments in technical architecture and security measures. User awareness training and other behavioral interventions are critical for improving Social Engineering resilience. Training and education programs for users are crucial in reducing the probability of these attacks. Compliance with security policies and procedures is significantly improved through education-based training. A security culture involving all stakeholders is also essential, as open, and honest communication from management can increase user awareness of potential threats. Emotional biases such as fear, trust, and curiosity also impact susceptibility to attacks, but personal traits that make individuals vulnerable require further investigation. This dissertation aims to provide a comprehensive assessment of the state of knowledge in this field and propose a framework by identifying best practices for improving Social Engineering resilience in organizations, while supporting the development of new research studies to address this issue. Its goal is to help enterprises of any size leverage this framework to reduce the risk of successful Social Engineering attacks and improve their culture of security awareness.
Description
Keywords
Engenharia social Comportamento humano Características pessoais Arquitetura de segurança Phishing Cibersegurança Ciberataques Revisão sistemática de literatura Sensibilização para a segurança Social engineering Human behavior Personal traits Security architecture Threat actors Cybersecurity Cyberattacks Design science research Systematic literature review Framework Security awareness
Citation
Ribeiro, Ricardo Alexandre Bentes - Improving social engineering resilience in enterprises [Em linha]. [S.l.]: [s.n.], [2024]. 78 p.