Social Engineering and Crime Prevention in Cyberspace

다국어 초록 (Multilingual Abstract)

This paper highlights methods of syntactic and semantic social engineering attacks (human-based and computer-based) that are currently prevalent in the cyber community. It will also discuss emerging trends and, the likely
future direction cyber-crime will take with respect to social engineering. The risks of deception in the on-line environment appear to be increasing and with the rapid growth of internet access a large pool of people are likely to be exposed to manipulation. The legal response to on-line forms of deception or social engineering remains fragmented and inadequate failing to recognise the increased potential of organized criminal activity.

목차 (Table of Contents)

• Ⅰ. Introduction(Ⅰ. 서론)
• Ⅱ. What is Social Engineering?(Ⅱ. 소셜 엔지니어링이란 무엇인가?)
• Ⅲ. Motivation for Hackers(Ⅲ. 해커의 동기)
• Ⅳ. The Stages in a Social Engineering Attack(Ⅳ. 소셜 엔지니어링 공격단계)
• Ⅴ. Psychological Triggers Behind Social Engineering(Ⅴ. 소셜 엔지니어링의 심리적 유인)
• Ⅵ. Common Traits(Ⅵ. 공통적인 특성)
• Ⅶ. Methods of Social Engineering(Ⅶ. 소셜 엔지니어링 방법)
• Ⅷ. Defense against Social Engineering(Ⅷ. 소셜 엔지니어에 대한 방어)
• Ⅸ. Security Policy to Address Social Engineering(Ⅸ. 소셜 엔지니어링을 다루는 보안 정책)
• Ⅹ. Security Awareness Training for all users(Ⅹ. 모든 사용자에 대한 보안인식 훈련)
• ⅩⅠ. Current Trends(ⅩⅠ. 현재의 동향)
• ⅩⅡ. Future Trends(ⅩⅡ. 미래의 추세)
• REFERENCES

참고문헌 (Reference)

1 Cialdini R. B., "When Tactical Pronouncements of Change Become Real Change: The Case of Reciprocal Persuasion’" 62 (62): 30-40, 1992

2 Computer Crime Research Centre(CCRC), "Telephone Version of Phishing"

3 Federal Trade Commission, "Take Charge: Fighting back against Identity Theft Federal Trade Commission, Washington D.C. USA"

4 Rusch J., "Social Engineering of Internet Fraud United States Justice Department - Proceedings of the 1999 Internet Society Conference, USA"

5 Cateledge B., "Social Engineering Overview University of South Carolina, Colombia, USA"

6 Granger S., "Social Engineering Fundamental, Part II: Combat Strategies" 2002

7 Granger S., "Social Engineering Fundamental, Part I: Hacker Tactics" 2002

8 Guenther M., "Social Engineering - Security Awareness Series Information Warfare Site U.K"

9 Allen M., "Social Engineering - A Means to Violate a Computer System"

10 Schneier B., "Semantic Attacks: The Third Wave of Network Attacks"

11 "Security Focus Online"

12 "Security Focus Online"

13 Smith R.G., "Preventing Identity-related Crime: 100 points, biometrics or identity cards" (324) : 2006

14 Australian Institute of Criminology(AIC), "Phishing- High Tech Crime Brief"

15 De La Cuarda, F., "Pharming - a new technique for Internet fraud, Computer Crime Research Centre"

16 Australian Institute of Criminology(AIC), "Online Auction Crime, AIC High Tech Crime Brief" 2007

17 Farber, D, "Mitnick on Mitnick: ‘Why I’m going legit’(Part Two Interview with Dan Farber.’ ZDNet."

18 Nelson, R., "Methods of Hacking: Social Engineering. Institute for Systems research, University of Maryland"

19 Allan A., "Management Update: How Businesses Can Defend against Social Engineering Attacks" 16 : 2005

20 Landman, J., "It Could Have Been You: How States Exploit Counterfactual Thought to Market Lotteries" 17 (17): 299-321, 2000

21 Chantler A.N., "Intelligence Futures: Brace Yourself, Be Prepared to Accept the Unacceptable" 2006

22 Petty R. E., "Individual versus group interest violation: Surprise as a determinant of argument scrutiny and persuasion" 19 (19): 418-442, 2001

23 Burtner W. K., "Hidden Pressures" 92 : 29-32, 1991

24 Computer Crime Research Centre(CCRC), "Hackers Shift Targets in 2006"

25 Computer Crime Research Centre(CCRC), "Hackers Replaced by Phish Con Artists"

26 Sagarin, Brad J., "Dispelling the illusion of invulnerability: The motivations and mechanisms of resistance to persuasion" 83 (83): 526-541, 2002

27 Barrett N, "Digital Crime: Policing the Cybernation" 1997

28 Choo, R., "Criminal exploitation of online systems by organised crime groups" 3 : 2008

29 Fite B.K., "Corporate Identity Theft SANS Institute, San Diego, California, USA"

30 Australian Institute of Criminology(AIC), "Concepts & Terms - High Tech Crime Brief"

31 Federal Communications Commission, "Computer Security Notice: Social Engineering Computer Security Week; Federal Communications Commission, USA"

32 MicroSoft, "Asia Pacific Legislative Analysis: Current and Pending Online Safety and Cybercrime Laws" Microsoft 2007

33 Gragg D., "A multi-Level Defense Against Social Engineering SANS Institute, San Diego, California, USA"