Principles of Persuasion in Social Engineering and Their Use in Phishing
Autor: | Ana Ferreira, Lynne Coventry, Gabriele Lenzini |
---|---|
Přispěvatelé: | Fonds National de la Recherche - FnR [sponsor], SnT [research center] |
Rok vydání: | 2015 |
Předmět: |
Persuasion
business.industry Computer science Social engineering (security) media_common.quotation_subject social engineering Multidisciplinary general & others [C99] [Engineering computing & technology] Internet privacy phishing Deception Phishing Multidisciplinaire généralités & autres [C99] [Ingénierie informatique & technologie] World Wide Web principles of persuasion business media_common |
Zdroj: | Lecture Notes in Computer Science ISBN: 9783319203751 HCI (22) In I. A., T. Tryfonas (Ed.), Human Aspects of Information Security, Privacy, and Trust Third International Conference, HAS 2015 (pp. 36-47). Switzerland: Springer (2015). |
DOI: | 10.1007/978-3-319-20376-8_4 |
Popis: | Research on marketing and deception has identified principles of persuasion that in influence human decisions. However, this research is scattered: it focuses on specific contexts and produces different taxonomies. In regard to frauds and scams, three taxonomies are often referred in the literature: Cialdini's principles of influence, Gragg's psychological triggers, and Stajano et al. principles of scams. It is unclear whether these relate but clearly some of their principles seem overlapping whereas others look complementary. We propose a way to connect those principles and present a merged and reviewed list for them. Then, we analyse various phishing emails and show that our principles are used therein in specific combinations. Our analysis of phishing is based on peer review and further research is needed to make it automatic, but the approach we follow, together with principles we propose, can be applied more consistently and more comprehensively than the original taxonomies. |
Databáze: | OpenAIRE |
Externí odkaz: |