20.500.12556/DKUM-90058 Socialni inženiring na internetu magistrsko delo Social engineering on the internet Socialni inženiring, v katerem se od internetnega uporabnika z manipulacijo pridobi in zlorabi njegove zasebne informacije, predstavlja resno grožnjo v kibernetskem okolju. Ker je človek zaupljive narave, predstavlja lažjo »tarčo« za razkritje zasebnih podatkov, socialni inženirji pa tudi postajajo vse bolj profesionalizirani. Še pred napadom izvedejo obsežno raziskavo svoje žrtve, vešči so psihološke manipulacije, komuniciranja, prepoznavanja čustev in vedenja, zato si zlahka pridobijo zaupanje svoje žrtve. Uporabniki interneta in podjetja zaradi socialnega inženiringa utrpijo veliko škode. Napadena podjetja so v povprečju izgubila 130.000 dolarjev zaradi uničenih podatkov in drugih zlorab. Zaskrbljujoč je nad 90-odstotni delež socialnega inženiringa v kibernetskem okolju. Učinkovitost gre pripisati enostavnosti izvedbe, profesionaliziranosti socialnih inženirjev, razvoju digitalizacije in tudi pojavu umetne inteligence. Med 34 obravnavanimi primeri socialnega inženiringa v svetu je najodmevnejši in finančno največji primer napada na podjetji Google in Facebook med leti 2013 in 2015, katerega vrednost ocenjujejo na rekordnih 121 milijonov dolarjev. Najpogostejša oblika napada socialnih inženirjev tako v svetu kot v Sloveniji predstavlja »ribarjenje«, pri katerem se preko telefonskih klicev, e-pošte, lažnih spletnih mest ali oglasov zavede žrtev in od nje pridobi občutljive in zaupne informacije, kot so podatki o kreditni kartici, zavarovanju, polnem imenu, naslovu ipd. Zaradi kompleksnosti izvedenih napadov ter kombiniranja več oblik napadov obramba pred socialnim inženiringom ni enostavna, se je pa možno s krepitvijo previdnostnega vedenja preventivno usmeriti. Okrepiti je potrebno osveščanje in ozaveščanje uporabnikov interneta glede socialnega inženiringa ter v podjetjih vzpostaviti zanesljive varnostne politike. Social engineering, in which an internet user is manipulated so that their private information can be obtained and misused, is a serious threat in the cyber environment. As human beings are of a trusting nature, they are an easier target for the disclosure of private information, and social engineers are also becoming increasingly professional. Before the attack, they extensively study their victim, and they are skilled in psychological manipulation, communication, recognition of emotions and behaviour, and therefore they easily gain the trust of their victim. Internet users and businesses suffer a lot of damage due to social engineering, with attacked businesses losing an average of US$130,000 due to destroyed data and other abuses. The over 90% rate of presence of social engineering in the cyber environment is alarming. Its effectiveness can be attributed to the simplicity of methods, the professionalisation of social engineers, the development of digitisation and also the emergence of artificial intelligence. Among the 34 discussed cases of social engineering globally, the most high-profile and financially largest case is the attack on Google and Facebook between 2013 and 2015, the value of which is estimated at a record US$121 million. The most frequent form of attack by social engineers, both globally and in Slovenia, is phishing, in which the victim is deceived by phone calls, e-mails, fake websites or advertisements that are used to obtain their sensitive and confidential information, such as credit card information, insurance, full name, address, etc. Due to the complexity of the performed attacks and the combination of several forms of attacks, defending against social engineering is not easy, but it is possible to focus on prevention by strengthening precautionary behaviour. It is necessary to strengthen the consciousness and awareness of internet users about social engineering and establish reliable security policies in companies. socialni inženiring kibernetska varnost napadi magistrska dela Social Engineering Internet Users Attack Cyber Security true true false B. Bajrami Slovenski jezik Angleški jezik Magistrsko delo/naloga 2024-08-21 17:54:32 2024-11-13 13:25:56 2024-11-20 09:58:21 0000-00-00 00:00:00 2024 0 Ljubljana 2024 Ljubljana VIII f., [71] str. 0000-00-00 NiDoloceno NiDoloceno NiDoloceno 0000-00-00 0000-00-00 0000-00-00 343.3/.7:004(043.2) 214613251 MAG_Bajrami_Blerta_2024.pdf MAG_Bajrami_Blerta_2024.pdf 1 A9E35633AC250A981FB9DCBC4E9E2A52 2275f419b5faaa445a5cf82f9f7a86af1cf556964bddd56badd0099ff18418d9 57ca078a-a1ba-11ef-a052-00155d000105 https://dk.um.si/Dokument.php?lang=slv&id=186814 Fakulteta za varnostne vede 0 0 0