First and Last Name/s of Presenters

Thai H. NguyễnFollow

Mentor/s

Sajal Bhatia

Participation Type

Paper Talk

Abstract

In today’s current information security ecosystem, hardware and software securities have made the professions of hackers and threat actors harder in achieving their goals. Hackers and threat actors are now increasingly using social engineering tactics in the face of increasing technical security technologies. Social engineering tactics utilizes psychological manipulation techniques to circumvent technical security systems. While every year there are vast leaps in technical security systems, one critical dynamic still needs a dire upgrade to their operating system. The human dynamic and our innate psychological processing algorithms need a new approach to mitigating and stopping social engineering attacks. Higher education institutions are prime target for social engineering engagement missions. Universities and colleges across the world house a great number of diverse faculties, students, alumni, and employees in their ecosystem. When taken into account the increasing number of inclusions of international individuals, it only increases the existing dynamic vulnerable landscape. The authors of this paper proposes utilizing social engineering awareness training with specialized crafted scenarios focused on real-world techniques geared toward a higher education environment to combat social engineering attacks. This paper will gather a pre-awareness survey of a sample student, faculty, and employee body to assess the level of awareness. The results will be compared to a post-awareness survey to assess the effectiveness of social engineering awareness and training.

Location

Digital Commons

Start Day/Time

4-24-2020 2:00 PM

End Day/Time

4-24-2020 4:00 PM

Students' Information

Thai Nguyen.

Second Prize, WAC Writing Prize (Best Writing)

Prize Categories

Best Writing (formerly called the Writing Across the Curriculum prize; the final submission date to be considered for this award is Apr 1)

Share

COinS
 
Apr 24th, 2:00 PM Apr 24th, 4:00 PM

Higher Education Social Engineering Attack Scenario, Awareness & Training Mode

Digital Commons

In today’s current information security ecosystem, hardware and software securities have made the professions of hackers and threat actors harder in achieving their goals. Hackers and threat actors are now increasingly using social engineering tactics in the face of increasing technical security technologies. Social engineering tactics utilizes psychological manipulation techniques to circumvent technical security systems. While every year there are vast leaps in technical security systems, one critical dynamic still needs a dire upgrade to their operating system. The human dynamic and our innate psychological processing algorithms need a new approach to mitigating and stopping social engineering attacks. Higher education institutions are prime target for social engineering engagement missions. Universities and colleges across the world house a great number of diverse faculties, students, alumni, and employees in their ecosystem. When taken into account the increasing number of inclusions of international individuals, it only increases the existing dynamic vulnerable landscape. The authors of this paper proposes utilizing social engineering awareness training with specialized crafted scenarios focused on real-world techniques geared toward a higher education environment to combat social engineering attacks. This paper will gather a pre-awareness survey of a sample student, faculty, and employee body to assess the level of awareness. The results will be compared to a post-awareness survey to assess the effectiveness of social engineering awareness and training.

 

To view the content in your browser, please download Adobe Reader or, alternately,
you may Download the file to your hard drive.

NOTE: The latest versions of Adobe Reader do not support viewing PDF files within Firefox on Mac OS and if you are using a modern (Intel) Mac, there is no official plugin for viewing PDF files within the browser window.