Social Engineering Attacks: A Survey

• Published in: Future internet Vol. 11; no. 4; p. 89
• Main Authors: Salahdine, Fatima, Kaabouch, Naima
• Format: Journal Article
• Language: English
• Published: Basel MDPI AG 01-04-2019
• Subjects: baiting; Big Data; Communications systems; Computer viruses; Computers; Consumers; cyber security; Cybercrime; Cybersecurity; Electronic mail systems; Engineering; Internet; Malware; phishing; Ransomware; robocalls; scams; social engineering attacks; Social networks; Social security; Software; spear phishing; Theft; vishing; Websites; United States > US
• ISSN: 1999-5903; 1999-5903
• DOI: 10.3390/fi11040089

The advancements in digital communication technology have made communication between humans more accessible and instant. However, personal and sensitive information may be available online through social networks and online services that lack the security measures to protect this information. Communication systems are vulnerable and can easily be penetrated by malicious users through social engineering attacks. These attacks aim at tricking individuals or enterprises into accomplishing actions that benefit attackers or providing them with sensitive data such as social security number, health records, and passwords. Social engineering is one of the biggest challenges facing network security because it exploits the natural human tendency to trust. This paper provides an in-depth survey about the social engineering attacks, their classifications, detection strategies, and prevention procedures.