A social network analysis perspective on users' vulnerability to socially engineered phishing attacks Conference

Wei, J, Schuetz, S. (2019). A social network analysis perspective on users' vulnerability to socially engineered phishing attacks .

cited authors

  • Wei, J; Schuetz, S

abstract

  • By disguising as an in-network individual, socially engineered spear-phishing (SESP) attacks are highly successful and prevalent, especially with the vast availability of social information exposed on online social networks (OSN). However, SESP is scarcely researched. Existing studies often focus on simple phishing messages and ignore the role of ostensible senders on users' vulnerability to phishing attacks, which cannot explain and predict which SESP messages users are especially vulnerable to. Against this backdrop, we draw from social network analysis to explain users' vulnerability to SESP attacks. We suggest that users' vulnerability depends on users' relationship to the ostensible sender and to which extent the message content is consistent with expectations formed by previous communication exchanges. This study contributes to phishing literature by providing a novel conceptualization of sender characteristics and message content, adding theoretical nuance to the problem that aids the development of preventive measures such as training and OSN policies.

publication date

  • January 1, 2019