User characteristics that influence judgment of social engineering attacks in social networks

Samar Muslah Albladi*, George R.S. Weir

*Corresponding author for this work

Research output: Contribution to journalArticlepeer-review

73 Citations (Scopus)
124 Downloads (Pure)

Abstract

Social engineering is a growing source of information security concern. Exploits appear to evolve, with increasing levels of sophistication, in order to target multiple victims. Despite increased concern with this risk, there has been little research activity focused upon social engineering in the potentially rich hunting ground of social networks. In this setting, factors that influence users’ proficiency in threat detection need to be understood if we are to build a profile of susceptible users, develop suitable advice and training programs, and generally help address this issue for those individuals most likely to become targets of social engineering in social networks. To this end, the present study proposes and validates a user-centric framework based on four perspectives: socio-psychological, habitual, socio-emotional, and perceptual. Previous research tends to rely on selected aspects of these perspectives and has not combined them into a single model for a more cohesive understanding of user’s susceptibility.

Original languageEnglish
Article number5
Number of pages24
JournalHuman-centric Computing and Information Sciences
Volume8
Issue number1
DOIs
Publication statusPublished - 28 Feb 2018

Funding

This work is supported by King Abdulaziz University, Kingdom of Saudi Arabia as part of the first author’s Ph.D. research conducted at the University of Strathclyde in Glasgow, UK.

Keywords

  • deception
  • information security
  • phishing
  • social engineering
  • social network

Fingerprint

Dive into the research topics of 'User characteristics that influence judgment of social engineering attacks in social networks'. Together they form a unique fingerprint.

Cite this