论文标题
物理世界与网络空间中的社会工程攻击和防御：对比研究
Social Engineering Attacks and Defenses in the Physical World vs. Cyberspace: A Contrast Study
论文作者
论文摘要
社会工程攻击是同样适用于物理世界和网络空间的现象。在物理世界中，研究了这些攻击时间比网络空间的攻击时间更长。这促使我们研究了社会工程在物理世界中的攻击和网络空间之间的攻击方式，包括它们的共同特征和独特的特征。为此，我们提出了一种方法，以将物理世界中的社会工程攻击和防御统一为单个框架，包括：（i）基于描述这些攻击的心理原理的系统模型； （ii）这些攻击的系统化； （iii）针对他们的防御系统的系统化。我们的研究导致了一些见解，这阐明了未来的研究方向，以充分捍卫网络空间中的社会工程攻击。
Social engineering attacks are phenomena that are equally applicable to both the physical world and cyberspace. These attacks in the physical world have been studied for a much longer time than their counterpart in cyberspace. This motivates us to investigate how social engineering attacks in the physical world and cyberspace relate to each other, including their common characteristics and unique features. For this purpose, we propose a methodology to unify social engineering attacks and defenses in the physical world and cyberspace into a single framework, including: (i) a systematic model based on psychological principles for describing these attacks; (ii) a systematization of these attacks; and (iii) a systematization of defenses against them. Our study leads to several insights, which shed light on future research directions towards adequately defending against social engineering attacks in cyberspace.
