Social Engineering Methods Research Articles

Approaches to measuring the risk of cyberattacks in remote banking services of Russia

Purpose. Due to the use of technology in banks their risks of information security breach are rising significantly. In the context of active introduction of remote banking services (RBS) in banking business of Russia, additional study of issues of assessing the risk of cyberattacks on banking automated systems was required. Methods. The methods of financial management, probability theory, system analysis of scientific literature on fundamental and applied research, and a method of graphical interpretation of analyzed phenomena are used. The paper gives a detailed analysis of the concepts of “cyberspace” and “cybersecurity”. Remote banking is considered from the point of view of financial management. Attention is drawn to the factors of work in cyberspace that increase the levels of banking risks. The relationship of cyberattacks on bankingautomated systems and possible consequences for the bank is analyzed. Novelty. Given the wide spread of social engineering methods when committing fraudulent activities on the Internet the measures to increase the cyber literacy of population are needed. The method for assessing the risk of cyberattacks on RBS for use by risk department specialists and employees of internal control services is developed. As a result, considering innovative systems and technologies that await us in the future, the effectiveness of risk assessment for solving current challenges is increased. Results. Attempts are made to formulate the mathematical model of the probabilistic analysis of information security incidents to optimize the algorithm for responding to incidents. Calculations based on the proposed model made it possible to determine the duration of exploitation of vulnerability of RBS, when the probability of preventing an incident exceeds probability of its realization. The findings may be useful for scientific research on the risks of information security breach in RBS.

Social engineering in the national agriculture economy on example of dairy industry development in the Russian Federation

Issues on dairy producers’ motivation are not very obvious at the first sight. The main argument for economic activity is profit. Apparent, a large number of "pitfalls", which are subsequently found in the process of doing business, sometimes lead to a halt in the production process. Periods of change of accents in agricultural business that are typical both for the economic branch as a whole, and specifically for the dairy industry, are considered in this paper. It is worth noting that the quality and quantity of specialized information is the basis of any business. This paper considers aspects of the impact of created, destroyed or modified information modules in the field of economic management in general and the impact of information blocks on the dairy industry. The socio-engineering scheme of data collection, planned for use in the automated system of selection of cattle breeds, depending on the ecological and geographical conditions of the breeding region, is proposed in this work. Algorithm of information processes of the designated system with methods of social engineering is formed. This algorithm is designed to collect data on specific and time-stable features of different cattle breeds.

КІБЕРБЕЗПЕКА В ЦИФРОВОМУ НАВЧАЛЬНОМУ СЕРЕДОВИЩІ

The article discusses the problems of cyber-security of participants of the educational process, emphasizes the fact that these problems are not limited to the technical aspects of the protection of information resources, they must include in their entirety the following types of protection: legal, technical, informational, organizational and psychological. Among the psychological tools for securing cyber-security, it is proposed to distinguish cognitive ones, as the general population, and especially children and youth, increasingly become targets of cyber-attacks, first of all, their cognitive sphere, becoming the most vulnerable (weak) link in the network. In anthropocentric networks, which make up an ever-increasing share among common networks, the network itself acquires new properties, acting as an independent component (in addition to factors such as the network node, interface and links). Threats to participants in the educational process from the cyberspace should be regarded as passive and active, developing adequate means of protection and viability of the system "subject of educational process-learning-environment". The most significant among cyber-threats for the participants of the educational process are the social engineering methods, which knowledge and resistance can be the most effective for providing cyber-security. As part of the training of participants in the educational process on cyber-security, it is proposed to use "cyber vaccination", that is the formation of a conscious cognitive experience of staying under the influence of a cyber threat and counteracting it as a system of training activities that include, in addition to traditional methods, training of "cyber attacks", as well as the formation of knowledge and skills of resilience (recovery) in relation to cyber-threats. Further research is suggested to focus on the detailed development of types of threats to participants in the education process, as well as methods of counteraction. A special place should be a problem of resistance to cyber-threats, which can use the experience of training operators in emergent industries, including assessing the current state of the person and necessary adjustments in order to optimize its performance.

NGSIEM Based APT Attack Analysis System

APT attack has become the most serious security threat, attackers may use social engineering methods and a large number of 0-day vulnerability attacks to steal or tamper the core data of the target. If the target does not have the ability of real-time attack detection and defense, once the system is intruded, it will suffer serious economic and business losses. The author sums up the typical characteristics and life cycle of APT attacks, which explains the common attack channels and critical steps of APT attacks, and then describes the technical difficulties and challenges in analyzing APT attacks. To solve the problems, an APT attack analysis system based on NGSIEM is proposed, which can implement normalization and complex algorithm processing on logs and alarms collected from server devices and security devices of multiple layers of the business system, as well as threat intelligence acquired from the intelligence agency.

Social engineering as shock absorbing mechanism against bank erosion: a study along Bhagirathi river, West Bengal, India

ABSTRACT The issue of bank erosion is very severe in the lower stretch of Bhagirathi River in West Bengal, India. During 1984–2012 the average annual rate of bank line shifting at the selected cross sections was computed to be oscillating around 10 m year−1. Micro-level socio-economic survey portrayed that greater than 45 per cent farmers lost about 90 per cent landed property in some villages during 1970–2012 transforming large as well as marginal farmers into landless refugees. The immediate shock of land loss is reflected through decrease in per capita income. Head count ratio, poverty gap index, and poverty severity index showed an increase of poverty by 10–15 per cent. Inverse Herfindahl-Hirschman index depicted a gradual rise in occupational diversification during 1970–2012 (e.g. 1970:1.47, 1990:1.85 and 2012:2.66 for Rukunpur). To reduce the disaster risk of bank erosion, various structural measures (e.g. dyking with geotextile) that were undertaken proved futile subsequently. Therefore, the present enquiry attempts to propose some social engineering methods as shock absorbing mechanism against the threats of land-based agrarian economy. These are the three in situ modes of economic adjustment using local available resources (non-land-based household manufacturing, common property resource management, development of indigenous small scale and cottage industry) and one ex situ economic adjustment by developing labour migration.

Методы социальной инженерии

Методы социальной инженерии

Detection of vulnerabilities of the computer systems and networks using social engineering techniques

Information protection in computer systems and networks is focused on preserving its confidentiality properties of, integrity and availability from various inherently adverse impacts. Potentially possible adverse effects are interpreted as a threat. To prevent or complicate the possibility of realizing threats and reducing potential losses, a system of information protection measures is created and maintained in a healthy state. Such a system includes a computing system, physical environment, staff, and information. One of the most vulnerable elements of such system is staff. Within the framework of the socio-engineering approach, staff vulnerability is interpreted as its weaknesses, needs, mania (passions), hobbies. Manipulating them allows one to gain unauthorized access to information without destroying and distorting its main system-forming qualities. This is reflected in such forms as fraud, deception, scam, intrigue, hoax, provocation. The use of each of these manipulation forms is preceded by the determination of its content by careful planning, organization, and control. These actions are the basis of social engineering methods. Their use is aimed at imitating the actions of the information security violator, which are aimed at staff. This allows to assess the level of staff skills in the information security field and, as a result, to identify information vulnerabilities in computer systems and networks. The methods of social engineering used for this are divided into two groups, in particular, remote social engineering and personal contact. Methods of remote social engineering are implemented by means of modern telecommunications. In addition, the second group of methods involves the establishment of personal contact with the object of influence. In the end, it becomes possible not only to identify, neutralize, but also to prevent information vulnerabilities in computer systems and networks with the introduction of social engineering methods. Therefore, firstly, its protection is ensured taking into account the requirements of the information security policy; secondly, the rules of conduct of the staff are established, regulated by the job descriptions; thirdly, training is held to increase the persistence of employees stereotypes of the organization.

Entropy-based security risk measurement for Android mobile applications

Android as a widest used operating system for smartphones and mobile devices uses permissions to restrict malicious applications (apps). However, malware developers use various social engineering methods to entice users for installing malwares after granting critical permissions by users. Therefore, it is essential to estimate security risks of untrusted Android apps to help users for making better decisions regarding app selection and installation. In this paper, the concept of criticality for Android permissions is precisely defined according to the abuse of permissions by known malwares and their legal usage by useful apps. Based on this definition and analyzing requested permissions of large numbers of malwares and benign apps, a new criterion is proposed to measure the security risks of the apps. This measure benefits from the concepts of entropy and information gain of permissions regarding separating malwares from benign apps. In this criterion, more informative permissions have higher impacts on the computed risk values. In order to evaluate the proposed criterion, two new datasets of recent malicious and non-malicious Android apps have been constructed and analyzed against existing ones. This analysis shows that permission usage patterns of Android apps are changed over the time. Empirical evaluations on recent and previous malwares and benign apps reveal the superiority of the proposed criterion with respect to previously proposed ones in terms of assigning larger risk values to malwares.

#SafeCard: Ukraine’s answer to cyberthreats targeting cardholders

This paper reviews the project #SafeCard that was implemented by the Ukrainian Interbank Payment Systems Members Association (EMA) with the financial support of the US Embassy in Ukraine. The project spanned 2016–17 in Ukraine. Its aim was to minimise the level of fraud of payment instruments and ATMs. A number of political and economic factors in Ukraine have contributed to a significant growth in cybercrime schemes targeting bank clients. The main threat to Ukrainian cardholders is the use of social engineering methods that aim to complete operations in a card-not-present (CNP) environment (voice phishing (vishing), SMS phishing (smishing) and phishing websites), along with skimming and cash trapping in ATMs. Threat analysis and forecast was conducted, a common vision for the future was agreed and the following main objectives were determined: 1) To improve Ukraine’s criminal legislation; 2) To raise awareness among Ukrainian citizens; 3) To improve capacities of criminal justice professionals to obtain and check information in banks; 4) To improve the knowledge and skills of criminal justice professionals and their cooperation with banks; 5) To raise awareness among prosecutors and judges. This was the first implementation of a project on this scale in Ukraine. As well as meeting the desired challenges, the project also resulted in a hugely positive experience and strengthened the synergy of public–private partnerships. This paper describes the project and the final results. The author hopes that readers will gain some insights that will be beneficial for work to prevent payment fraud in their own countries.

Negative information-psychological impact on individual consciousness based on socio-engineering approach

The information-psychological impact on individual consciousness is considered. It is established that such influence has not only constructive, positive character, but also destructive, negative in relation to the personality. Internal and environmental factors lead to this. Individual-psychological properties of the individual affect her actions, acts, behavior in the process of life. Therefore, it not the only successful implementation of negative information and psychological impact depends on them but also opposition to it. The research directions of ways overcoming this problem were analyzed. Among them allocated, the implementation of negative information-psychological impact based on the socio-engineering approach. This choice is caused to the fact that the result of the psychological interaction of interpersonal communication is shown in the change emotional state, behavior or internal attitudes at least by the one interacting side to achieve the stated goal, namely unauthorized access to information. Social engineering methods are aimed for such a change in the psyche at which the objective reality changes, the conditions of activity. Such a change achieved due to the negative information-psychological impact on the individual consciousness through the impact on the person’s mental state, feelings, thoughts and actions with exclusively psychological means. The features of such influences are that the person can ignore it and not realize it as the threat. This caused by the fact that it didn’t always realize, leads to the creation of illusions concerning reality, programming of motives to cooperation, the hidden management. Given this, the ways of ensuring the individual security consciousness from the negative information-psychological impact based on socio-engineering approach are proposed.

Process of distribution of undesirable information in social networks

Marina V. Tumbinskaya - Associate Professor, Department of Information Protection Systems, Kazan National Research Technical University named after A.N. TupolevAddress: 10, Karl Marx Street, Kazan, 420111, Russian FederationE-mail: tumbinskaya@inbox.ru Currently, users of online social networks increasingly use them to promote business, distribute advertisements for goods and services, engage in leisure, hobbies, personal communication and information exchange. Thus, social networks have become an open source of information for malicious users. Hackers use various ways to implement attacks, one of which is the spread of unsolicited (targeted) information. Successful distribution of unsolicited information entails the implementation of an attack scenario and achievement of the hacker’s aim. In this regard, hackers have an interest in involving so-called social networking community leaders (users who have a high level of trust and influence among a large number of community users), who are able to successfully implement part of the attack scenario of the attacker. This article presents the results of the study in three situations: the user/potential hacker’s dissemination of targeted information on the social network, receipt of targeted information by users of the social network, and counteraction and prevention of the dissemination of targeted information on the social network. Experimental data are described and their analysis is presented. A method of protection from targeted information disseminated on social networks is identified, allowing for an increase in the level of protection of social network users’ personal data and personal information and ensuring the reliability of information. The results of the research will help prevent threats to information security, counteract attacks by hackers, who often use methods of competitive intelligence and social engineering through the use of countermeasures, develop a model of protection against targeted information and implement specialized software for its integration into social networks.

A SYSTEM APPROACH TO ORGANISING PROTECTION FROM TARGETED INFORMATION IN SOCIAL NETWORKS

Objectives The aim of the study is to formalise a generalised algorithm for the distribution of targeted information in social networks, serving as the basis for a methodology for increasing personal information security. Method The research is based on the methodology of protection from unwanted information distributed across social network systems. Results The article presents the formalisation of an algorithm for the distribution of targeted information across social networks: input and output parameters are defined and the algorithm’s internal conditions are described, consisting of parameters for implementing attack scenarios, which variation would allow them to be detailed. A technique for protection from targeted information distributed across social networks is proposed, allowing the level of protection of personal data and information of social networks users to be enhanced, as well as the reliability of information increased. Conclusion The results of the research will help to prevent threats to information security, counteract attacks by intruders who often use methods of competitive intelligence and social engineering through the use of countermeasures. A model for protection against targeted information and implement special software for its integration into online social network social information systems is developed. The system approach will allow external monitoring of events in social networks to be carried out and vulnerabilities identified in the mechanisms of instant messaging, which provide opportunities for attacks by intruders. The results of the research make it possible to apply a network approach to the study of informal communities, which are actively developing today, at a new level.

DTB-IDS: an intrusion detection system based on decision tree using behavior analysis for preventing APT attacks

Due to rapid growth of communications and networks, a cyber-attack with malicious codes has been coming as a new paradigm in information security area since last few years. In particular, an advanced persistent threats (APT) attack is bringing out big social issues. The APT attack uses social engineering methods to target various systems for intrusions. It breaks down the security of the target system to leak information or to destroy the system by giving monetary damages on the target. APT attacks make relatively simple attacks such as spear phishing during initial intrusion but a back door is created by leaking the long-term information after initial intrusion, and it transmits the malicious code by analyzing the internal network. In this paper, we propose an intrusion detection system based on the decision tree using analysis of behavior information to detect APT attacks that intellectually change after intrusion into a system. Furthermore, it can detect the possibility on the initial intrusion and minimize the damage size by quickly responding to APT attacks.

Intelligence based Defense System to Protect from Advanced Persistent Threat by means of Social Engineering on Social Cloud Platform

Advanced Persistent Threat is a specific design to survive until it reaches the target and creates backdoor for future Intrusion. The objective of this paper is, to design and implementation of a defense in depth system to protect social cloud against risks, threats and attacks. In this paper we discussed the policies and procedures of vulnerability management and intrusion detection system. We also focused on the steps involved in defense in depth system a layered architecture for prevention and protection from malicious users, masquerader and intruders. Where each layer restricts the intruder with deployed activities such as security monitoring, malicious site filtering, patches to remedy vulnerabilities, analysis of audit log files, Intrusion detection and prevention system and storage media management for protecting the cloud from advanced persistent threat. The different intrusion techniques using social engineering methods such as spear phishing or whale phishing are also discussed. A mathematical approach is given to secure the cloud computing using computational intelligence which is aimed to defense the attacks using Perron-Frobenius theorem and methods for public social network. In this paper we focused on the Defense in Depth model for a security layered strategy. We also discussed on the issues an audit communication or challenge to the cloud server data security. Defense System is the process of monitoring for and identifying unauthorized system access or manipulation and protecting the data from intruders. A clear description is given regarding the steps involved in the Advanced Persistent Attack and the measures or steps involved in Advanced Persistent Attack Defense System. The impact of security and privacy on cloud performance is calculated using cloud-sim tool, which supports simulating and modeling a large scale cloud infrastructure. An Experiment on intelligence based defense system using cloud analyst and simulator is given along with the result and conclusion.Keywords: Advanced Persistent Attack, Cloud Computing, Cloud Security, Cloud Server, Defense in Depth, Defense System, Vulnerability

Detection of phishing attacks in Iranian e-banking using a fuzzy–rough hybrid system

Phishing is a method of stealing electronic identity in which social engineering and website forging methods are used in order to mislead users and reveal confidential information having economic value. Destroying the trust between users in business network, phishing has a negative effect on the budding area of e-commerce. Developing countries such as Iran have been recently facing Internet threats like phishing, whose methods, regarding the social differences, may be different from other experiences. Thus, it is necessary to design a suitable detection method for these deceits. The aim of current paper is to provide a phishing detection system to be used in e-banking system in Iran. Identifying the outstanding features of phishing is one of the important prerequisites in design of an accurate system; therefore, in first step, to identify the influential features of phishing that best fit the Iranian bank sites, a list of 28 phishing indicators was prepared. Using feature selection algorithm based on rough sets theory, six main indicators were identified as the most effective factors. The fuzzy expert system was designed using these indicators, afterwards. The results show that the proposed system is able to determine the Iranian phishing sites with a reasonable speed and precision, having an accuracy of 88%.

Securing Online Bank Transactions from Phishing Attacks using MFA and Secure Session Key

Phishing is an online criminal activity using the collection of social engineering methods such as messages and emails to make the users to disclose their sensitive information such as personal details, username /password4 , etc. Since 2007 Net-Banking transactions are the target of the phishers. The strong techniques are required to avoid phishing attacks. In our paper, we proposed Multi Factor Authentication (MFA) and secure session key generation using Gaussian distribution to reduce the attacks caused by the phishers. Multi Factor Authentication technique authenticates the users using user’s signature image recognition8 and secret question answer. After successful authentication of user using Multi Factor Authentication technique, session key generated using Gaussian distribution is sent to user’s mobile phone. User proceeds with the transaction only after entering the session key received1 . By incorporating above mentioned techniques users can perform online transactions safely and securely. Keywords: Gaussian Distribution, Multi Factor Authentication, Phishing, Session Key, Social Engineering

Ethical Problems of the Sociologists Profession. Polish Perspective

ABSTRACT. The sociologists professional ethics defines the rules of the sociologists professional activities. Observing moral standards is an expression of care not only for the sociologists common good, but also for the society common good as the society is examined by the sociologists and the society uses and benefits from the research results. Society expects that sociologists will be highly qualified, will perfect their skills and improve their expertise as well as keep high ethical standards. The basic duty of every sociologist is not to harm the participants, but to protect their rights, interests, sensitivity and privacy. Coming across different people and social groups, a sociologist should rely on ethical rules as they guarantee the observance of civil and human rights. The researchers cannot use their authority to support particular people, political parties or groups, because such researchers will be seen as uncritical apologists of particular groups of power or interest. Sociologists who conduct research are under an obligation to carry it out in a way that does not raise either reservations or suspicions of impartiality. Only solid research conducted by reliable sociologists deserve to be acknowledged, and if such sociologists opinions are unbiased, they will be accepted and positively appraised. The article is an analysis of the subcject with using available literature.JEL Classification: Z1Keywords: sociology, ethical problems, research, polish perspective, profession.IntroductionContemporary sociological studies are utilitarian, as a matter of fact, because many people and institutions use information collected by the sociologists during empirical research. The ways this knowledge is used are of dual character. Some results serve the public welfare, especially solving difficult social problems, while other serve particular purposes by methods of social engineering. Gaining knowledge about a society becomes a very important and responsible task, so social research should be based on specific ethical standards.The range of a sociologist interests is wide and diverse. It includes various social processes, groups and communities, organizations, society institutions etc. A sociologist tries to decipher relations and connections between people, and is also interested in the activities of social instititutions. Studying a social sciences makes student able to determine their status and the dynamics of change as well as propose effective methods of obviating irregularities which may hamper the society's functioning. In a way, a sociologist becomes a society's physician, examining the society and social phenomena, and diagnosing social problems that have to be solved.Obviously, a sociologist interest in a society and direct contact with another participants of society requires observing high professional standards. Both the professional prestige and scientific value of their research depend on it. The broad range of research problems investigated by the sociologists affects the complexity and intricacy of ethical dilemmas stemming from the profession's specificity.The fundamental aim of this paper is to present selected ethical problems of the sociologists profession. Hitherto, the professional literature has not noted a comprehensive monograph on the axiology of a sociologist work. However, in various publications, there are references to ethical issues which apply to sociological research conducting.Contemporary sociological discussion develops toward the analysis of ethical issues with the interface of new media and social engineering. The development of new technology also allows the researcher to explore previously unknown issues. Interesting from the point of view of the researcher is to understand the principles of social science understood as the relationship between IT in the communication process and social world. In the process of investigation of this phenomenon on the one hand research interest is the impact of IT in communication for social and psychological changes among the people that use them. …

Extended classification of methods of social engineering

Due to the rapid development of modern information technologies of social engineering attacks are widespread and improvement. To develop and implement effective means of combating social engineering attacks (eg, such as information security management system) is necessary to have the most complete set of characteristics and components. Known classification requires additions and extensions to make possible a more effective means of resistance. Based on the analysis and synthesis of well-known publications on the subject field has been expanded known classification techniques of social engineering by introducing new characters and their components. In general classification includes 12 basic characteristics, integrates more than 50 characteristics. The results can be used, for example, for the construction of a risk assessment, the level of preparedness of personnel to combat social engineering attacks, etc.

Social Engineering A General Approach

Social engineering is considered to be a taboo subject in nowadays society. It involves the use of social skills or to obtain usernames, passwords, credit card data, or to compromise or altering the information and systems of an entity. Social engineering methods are numerous and people using it are extremely ingenious and adaptable. This technique takes advantage of the intrinsic nature of mankind, to manipulate and obtain sensitive information, persuading people into divulge it, using exceptional communication skills. Thus, five models of persuasion were identified, based on: simplicity, interest, incongruity, confidence and empathy, exploiting key factors which predispose people to fall victim to attacks of social engineering such as greed, self-interest, guilt or ignorance. It is well known fact that security is as strong as the weakest link in its chain (individuals) therefore, beyond technical measures, staff training is the key to success in defending against such attacks.Keywords: Social Engineering, Persuasion, Trust, Risk, Sensitive Information, Online Security, Confidence, Manipulation, Attack, Staff Training1 Social EngineeringThe society of 21st century has been defined as being based primarily on knowledge. Furthermore it has been founded on the exchange of data between all fields of activity. Nowadays, the amount of information held is directly proportional to the power that an individual can have on others; therefore, a very important aspect is not only acquiring but also protecting it from potential attacks. The emergence of numerous systems and protection mechanisms seemed to have solved the security problems. However, it has been discovered that the crucial element as remained the individual and not the machine, that installing the latest applications does not guarantee a complete protection of the system as it is not necessary to force it to infiltrate yourself, it is easier to get the information needed using persuasion or goodwill. Social engineering is a set of methods by which an individual or group of individuals are manipulated to provide access to certain information or to print a certain behaviour2 Social Engineering from a Non- Technological Point of ViewSocial engineering represents a set of methods through which an individual or a group of individuals are manipulated into providing access to certain information or used to induce certain behaviour. [1]In order to avoid technical security measures set to prevent attackers from breaking into systems, they have developed various procedures to bypass the software or hardware elements utilized. Social engineering is based on using psychological stratagems on system's users, thereby obtaining important data, such as usernames, passwords, security codes, access codes, credit card numbers and additional information for immediate benefits or ulterior ones. [2]Under the conditions listed above, plus given the fact that despite the automation of the machines and networks, nowadays, there is not a single computerized system that does not depend on human factor; social engineering is a hot topic in modern society. There will always be people responsible for providing information and maintenance of the systems. However social engineering has existed since the beginning of all times and this due to people's predilection to be polite, to help each other and trust each other. It is in human nature [3]. This technique takes advantage of the intrinsic nature of mankind to manipulate others and obtain sensitive information. In fact, most people who disclose data are aware of that, but they often believe that the information provided is not essential. The goal of social engineers, however, is to join pieces of information gathered from various sources.As for non-technological view, social engineering overlaps to some extent with the policy above all as a social science. Its development made possible the gathering and analysis of information about social attitudes and trends, as it is necessary to establish the initial state of a society and to predict the effects of decisions that might be taken. …

Corporate Network Exposure Due to Social Engineering and Forensic Methods Used to Discover Intrusions: Computer Security

Corporate Network Exposure Due to Social Engineering and Forensic Methods Used to Discover Intrusions: Computer Security