A Survey about the integration of social engineering attacks with cyber security exploiting Turkish vulnerabilities in Turkey

Download

index.pdf

Date

2015

Author

Tosun, Adem

Metadata

Show full item record

Item Usage Stats

207
views

139
downloads

Many organizations have been seeking for comprehensive and applicable security policies to regulate their security aspects. As it is a well-known issue, the weakest link of chain in Cyber security is human being and it cannot be measured easily as its being intangible. Organizations may invest millions of dollars to build technically secure systems by installing high level trusted software programs or devices. History has shown that these kind of measures neither has been that much successful or effective in protecting the systems nor prevented social engineering kinds of attacks which may lead to a compromised system without any need to lose much time and risk for a hacker. The purpose of this thesis is to investigate which successful tactic and techniques are successfully being used to compromise systems by manipulating or hacking human software rather than software systems and find out results of these attacks. In addition, the weakness of human software will be analyzed and dominant factors will be figured out. At the end of this thesis, how security policies should be made, which issues better be considered in addition to technical solutions and what the most weaknesses of participants will be revealed to provide a higher level secure systems for organizations. The effects and popularity of social engineering attacks will also be discussed at the end of the study and some countermeasures will be given to managers to prevent such social engineering attacks towards their workers.

Subject Keywords

Cyberterrorism., Computer crimes., Hackers., Data protection., Computer security., Computer networks

URI

http://etd.lib.metu.edu.tr/upload/12619307/index.pdf
https://hdl.handle.net/11511/25037

Collections

Graduate School of Informatics, Thesis

Suggestions

OpenMETU
Core

A faster intrusion detection method for high-speed computer networks Tarım, Mehmet Cem; Schmidt, Şenan Ece; Department of Electrical and Electronics Engineering (2011) The malicious intrusions to computer systems result in the loss of money, time and hidden information which require deployment of intrusion detection systems. Existing intrusion detection methods analyze packet payload to search for certain strings and to match them with a rule database which takes a long time in large size packets. Because of buffer limits, packets may be dropped or the system may stop working due to high CPU load. In this thesis, we investigate signature based intrusion detection with sig...
A Survey on the provable security using indistinguishability notion on cryptographic encryption schemes Ayar, Emre; Doğanaksoy, Ali; Koçak, Onur; Department of Cryptography (2018) For an encryption scheme, instead of Shannon's perfect security definition, Goldwasser and Micali defined a realistic provable security called semantic security. Using indistinguishability notion, one can define security levels according to the polynomial time adversaries' capabilities such as chosen plaintext attacks (CPA) and chosen ciphertext attacks (CCA) for both symmetric and asymmetric encryption schemes in addition to the hard mathematical problems the algorithms based on. Precautions to prevent the...
Virtual penetration testing with phase based vulnerability analysis Çalışkan, Emre; Baykal, Nazife; Department of Information Systems (2015) Vulnerability scanning, penetration testing, and manual auditing are ways of finding vulnerabilities in organizations. However, they have some limitations like time, accuracy, testers’ ability, etc. Virtual penetration testing aims to alleviate these limitations. By virtual penetration testing, it is intended to assess security controls corresponding to the vulnerabilities found by vulnerability scanning, and correlating assessment result with vulnerabilities. Consequently, correlation will enable to find e...
Security of certificate-based protocols: focus on server authentication Baran, Selim; Özbudak, Ferruh; Selçuk, Ali Aydın; Department of Cryptography (2015) Today, secure communication channels are mostly set up via certificate-based protocols, such as Secure Sockets Layer (SSL) and Transport Layer Security (TLS). Although they have been used for years and in so many areas, from e-commerce and internet banking to secure channel needs in military, there have been several attacks on their security model, which forced researchers to make studies on them. In this thesis, we will explain their security model, the vulnerabilities discovered so far, the precautions fo...
A Conceptual Model for a Metric Based Framework for the Monitoring of Information Security Tasks’ Efficiency Sönmez, Ferda Özdemir (Elsevier BV; 2019) Information Security Governance Systems are not adequate to measure the effectiveness and efficiency of security tasks for the enterprises. Although some of the systems offer ways for measurement, they still need the definition of measurement objectives and metrics. This study proposes a conceptual framework mode which has human and tool/process related metrics. This system also allows the collection of evidence data for security-related tasks and ways to motivate the security staff to provide a more produc...

Citation Formats

A. Tosun, “A Survey about the integration of social engineering attacks with cyber security exploiting Turkish vulnerabilities in Turkey,” M.S. - Master of Science, Middle East Technical University, 2015.