Social engineering and its countermeasures

Handbook of Research on Social and Organizational Liabilities in Information Security

Volumn , Issue , 2008, Pages 228-242

  Twitchell, Douglas P ^a  

^a ILLINOIS STATE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 84856381706     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.4018/978-1-60566-132-2.ch014     Document Type: Chapter

References (25)

1. Ahrens, F. (2004, September 8). FTC Pulls Plug on Infomercial Giant. Washington Post, p. E1.
2. Allen, M. (2006). Social Engineering: A Means to Violate a Computer System. Retrieved May, 2007, from http://www.sans.org/reading_room/whitepapers/engineering/529.php
3. Buller, D. B., & Burgoon, J. K. (1996). Interpersonal Deception Theory. Communication Theory, 6(3), 203-242.
4. Cazier, J. A., & Botelho, C. M. (2007). Social Engineering's Threat to Public Privacy. Paper presented at the the 6th Security Conference, Las Vegas, Nevada.
5. Daft, R. L., & Lengel, R. H. (1986). Organizational information, media richness and structural design. Management Science, 32, 554-571.
6. Gordan, L. A., Loeb, M. P., Lucyshyn, W., & Richardson, R. (2007). 2006 CSI/FBI Computer Crime and Security Survey: Computer Security Institute.
7. Gragg, D. (2003). A Multi-level Defense Against Social Engineering. Retrieved May, 2007, from http://www.sans.org/rr/whitepapers/engineer-ing/920.php
8. Harl. (1997). People Hacking: The Psychology of Social Engineering. Retrieved May, 2007, from http://library.cyber-punk.cc/files/se10.html
9. Herbert, A. J. (2005, December). Information Battleground. Air Force Magazine, 88.
10. Kahneman, D., & Tversky, A. (1979). Prospect Theory: An Analysis of Decision under Risk. Econometrica, 47(2), 263-292.
11. Kersetter, J. (2006). Reporters' records accessed in HP probe. CNET News.com Retrieved May, 2007, from http://news.com.com/Reporters+records+accessed+in+HP+probe/2100-1014_3-6113362.html
12. Lively Jr., C. E. (2003). Psychological Based Social Engineering. Retrieved May, 2007, from http://www.giac.org/certified_professionals/prac-ticals/gsec/3547.php
13. Microsoft. (2006>). How to Protect Insiders from Social Engineering Threats. Retrieved May, 2007, from http://www.microsoft.com/technet/security/midsizebusiness/topics/complianceandpolicies/socialengineeringthreats.mspx
14. Mitnick, K. D. (2000). Cyber Attack: Is the Government Safe? Senate Committee on Governmental Affairs Retrieved May, 2007, from http://www.iwar.org.uk/comsec/resources/sa-tools/mitnick-testimony.htm
15. Mitnick, K. D., & Simon, W. L. (2002). The Art of Deception: Controlling the Human Element of Security. Indianapolis, Indiana: Wiley.
16. Mitnick, K. D., & Simon, W. L. (2005). The Art of Intrusion: The Real Stories Behind the Exploits of Hackers, Intruders, and Deceivers. Indianapolis, Indiana: Wiley.
17. New e-mail virus preys on Anna Kournikova fans. (2001). CNN.com. Retrieved May, 2007, from http://archives.cnn.com/2001/TECH/inter-net/02/12/anna.worm/index.html
18. Plous, S. (1993). The Psychology of Judgment and Decision Making. New York: McGraw-Hill.
19. Rusch, J. (1999). The "Social Engineering" of Internet Fraud. INET '99. San Jose, California.
20. Shankland, S. (2006). HP chairman: Use of pretexting 'embarrassing'. CNET News.com Retrieved May, 2007, from http://news.com.com/HP+chairman+Use+of+pretexting+embarrassing/2100-1014_3-6113715.html
21. Silltow, J. (2001). Social Engineering, Part 1. Retrieved April, 2007, from http://www.theiia.org/ITAudit/index.cfm?act=itaudit.archivefid=339
22. Stiff, J. B., Kim, H., & Ramesh, C. N. (1992). Truth Biases and Aroused Suspicion in Relational Deception. 19(3), 326.
23. Tversky, A., & Kahneman, D. (1974). Judgment under Uncertainty: Heuristics and Biases. Science, 185(4157), 1124.
24. Twitchell, D. P. (2006). Augmenting Detection of Social Engineering Attacks Using Deception Detection Technology. Paper presented at the International Conference on i-Warfare and Security, Princess Anne, Maryland.
25. Whiteside, T. (1979). Computer Capers: Tales of Electronic Thievery, Embezzlement, and Fraud: Sidgwick & Jackson.