Towards automating social engineering using social networking sites

Proceedings - 12th IEEE International Conference on Computational Science and Engineering, CSE 2009

Volumn 3, Issue , 2009, Pages 117-124

  Huber, Markus ^a   Kowalski, Stewart ^b   Nohlberg, Marcus ^c   Tjoa, Simon ^a  

^a Secure Business Austria   (Austria)

^b STOCKHOLM UNIVERSITY   (Sweden)

^c UNIVERSITY OF SKÖVDE   (Sweden)

Author keywords

Automated social engineering; Deception; Security; Social engineering; Social networking sites

Indexed keywords

INFORMATION GATHERING; ONE STEP; PROTOTYPICAL IMPLEMENTATION; SOCIAL ENGINEERING; SOCIAL NETWORKING SITES; SOCIAL RELATIONSHIPS; TURING TESTS;

AUTOMATION; BEHAVIORAL RESEARCH; NETWORK SECURITY;

EXPERIMENTS;

EID: 70849122971     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSE.2009.205     Document Type: Conference Paper

References (26)

1. C. Dwyer, S. Hiltz, and K. Passerini, "Trust and privacy concern within social networking sites: A comparison of Facebook and MySpace, " in Americas Conference on Information Systems (AMCIS), Keystone, Colorado, USA, 2007.
2. T. Jagatic, N. Johnson, M. Jakobsson, and F. Menczer, "Social phishing, " Communications of the ACM, vol. 50, no. 10, pp. 94-100, 2007.
3. R. Gross and A. Acquisti, "Information revelation and privacy in online social networks (the Facebook case), " in Proceedings of the 2005 ACM workshop on Privacy in the electronic society, 2005, pp. 71-80.
4. D. Rosenblum, "What Anyone Can Know: The Privacy Risks of Social Networking Sites, " Security & Privacy, IEEE, vol. 5, no. 3, pp. 40-49, May-June 2007.
5. R. Gibson, "Who's really in your top 8: network security in the age of social networking, " in SIGUCCS '07: Proceedings of the 35th annual ACM SIGUCCS conference on User services. New York, NY, USA: ACM, 2007, pp. 131-134.
6. G. Hogben, "Security Issues and Recommendations for Online Social Networks, " Position Paper. ENISA, European Network and Information Security Agency, 2007.
7. M. Huber, "Automated social engineering, proof of concept, " Master's thesis, DSV SecLab, Stockholm University/Royal Institute of Technology, Mar. 2009. [Online]. Available: http://asebot.nysos.net.
8. S. Kowalski, "It insecurity: A multi-disciplinary inquiry, " Ph.D. dissertation, University of Stockholm and Royal Institute of Technology, Stockholm, Sweden, 1994.
9. R. Cialdini, Influence: science and practice. Allyn and Bacon, 2001.
10. M. Nohlberg, "Why Humans are the Weakest Link, " Social and Human Elements of Information Security: Emerging Trends and Countermeasures, p. 15, 2008.
11. R. Levine, Power of persuasion. John Wiley & Sons, 2003.
12. S. Grazioli, "Where Did They Go Wrong? An Analysis of the Failure of Knowledgeable Internet Consumers to Detect Deception Over the Internet, " Group Decision and Negotiation, vol. 13, no. 2, pp. 149-172, 2004.
13. T. Qin and J. Burgoon, "An Investigation of Heuristics of Human Judgment in Detecting Deception and Potential Implications in Countering Social Engineering, " Intelligence and Security Informatics, 2007 IEEE, pp. 152-159, 2007.
14. K. Marett, D. Biros, and M. Knode, "Self-efficacy, Training Effectiveness, and Deception Detection: A Longitudinal Study of Lie Detection Training, " lecture notes in computer science, vol. 3073, pp. 187-200, 2004.
15. K. Mitnick and W. Simon, The Art of Deception: Controlling the Human Element of Security. Wiley, 2002.
16. Gartner Inc., "There Are No Secrets: Social Engineering and Privacy, " Garnter Security webletter, vol. 1, no. 1, Feb. 2002, [Retrieved 2008-10-29]. [Online]. Available: http://www.gartner.com/gc/webletter/security/ issue1/.
17. M. Nohlberg and S. Kowalski, "The Cycle of Deception-A Model of Social Engineering Attacks, Defences and Victims, " in Proceedings of the Second International Symposium on Human Aspects of Information Security & Assurance (HAISA 2008), Jul. 2008.
18. Comscore, "Social Networking Goes Global, " 2008, [Retrieved 2008-06-14]. [Online]. Available: http://www.comscore.com/press/release.asp? press=1555.
19. Facebook, "Welcome to Facebook, everyone, " 2006, [Retrieved 2008-12-28]. [Online]. Available: http://blog.facebook.com/blog.php?post= 2210227130.
20. B. J. Fogg and D. Iizawa, "Online Persuasion in Facebook and Mixi: A Cross-Cultural Comparison, " in PERSUASIVE, 2008, pp. 35-46.
21. L. Von Ahn, M. Blum, N. Hopper, and J. Langford, "CAPTCHA: Using hard AI problems for security, " Lecture notes in computer science, pp. 294-311, 2003.
22. T. Muller, "13 reasons your facebook account will be disabled, " 2008, [Retrieved 2009-02-13]. [Online]. Available: http:// getsatisfaction.com/facebook/topics/13-reasons-your-facebook-account-will-be- disabled.
23. J. Bonneau, J. Anderson, R. Anderson, and F. Stajano, "Eight Friends Are Enough: Social Graph Approximation via Public Listings, " SNS 09 Nuremberg, Germany, vol. 2009.
24. P. Finn and M. Jakobsson, "Designing and Conducting Phishing Experiments, " IEEE Technology and Society Magazine, Special Issue on Usability and Security, vol. 26, no. 1, pp. 46-58, 2007.
25. A. Turing, "Computing machinery and intelligence, " Mind, vol. 59, no. 236, pp. 433-460, 1950.
26. R. S. Wallace, "The Annotated A.L.I.C.E. AIML, " 2009, [Retrieved 2009-02-07]. [Online]. Available: http://www.alicebot.org/aiml/aaa/.