Razpoznavanje in obramba pred spletnim socialnim inženiringom : diplomsko delo univerzitetnega študija

Grill, Kristina

| | SLO | ENG | Cookies and privacy

Bigger font | Smaller font

First page > Show document

Show document

Title:	Razpoznavanje in obramba pred spletnim socialnim inženiringom : diplomsko delo univerzitetnega študija
Authors:	ID Grill, Kristina (Author) ID Bernik, Igor (Mentor) More about this mentor...
Files:	UNI_Grill_Kristina_2012.pdf (484,03 KB) MD5: C9C10368BCC4BFA0D264271E486BFF01 PID: 20.500.12556/dkum/d1557814-cf0a-4e5c-b806-8e67e83615a8
Language:	Slovenian
Work type:	Bachelor thesis/paper
Typology:	2.11 - Undergraduate Thesis
Organization:	FVV - Faculty of Criminal Justice and Security
Abstract:	Diplomsko delo obravnava temo spletnega socialnega inženiringa, ki je izpopolnjena oziroma manj tvegana in nekoliko spremenjena oblika klasičnega socialnega inženiringa. Ta deluje s pomočjo človeške interakcije, gre pa za proces izkoriščanja zaupanja ljudi, z namenom pridobitve določenih podatkov. Spletni socialni inženirji za svoje delovanje potrebujejo računalniško tehnologijo in svetovni splet, ki jim predstavlja neskončno zalogo žrtev, te pa so dostopne ves čas. Namen spletnih socialnih inženirjev je prevara, ki jo uporabijo za dosego zastavljenega cilja, kar pa predstavlja veliko tveganje za informacijsko varnost, saj so tehnike napadalcev zelo napredne in za povprečnega uporabnika spleta neopazne. Ker je socialni inženiring vse bolj pogost na spletu, se lahko prav vsak znajde kot žrtev napada. Slednje je možno opaziti tudi v medijih, kjer lahko zasledimo vse pogostejše primere spletnih goljufij. Obramba pred spletnim socialnih inženiringom je zelo težavna, saj so tehnike različne, različno pa je tudi znanje uporabnikov spleta. Uspešnost napada je odvisna od samega uporabnika in pa predvsem iznajdljivosti napadalca oziroma socialnega inženirja. Ti največkrat izkoriščajo človeško nagnjenost k zaupanju in pomoči ter tako zavedejo uporabnika, da jim nasede in izda podatke, do katerih niso upravičeni. Razvoj svetovnega spleta je tako ponudil socialnim inženirjem nov prostor za delovanje, uporabnikom pa poleg različnih prednosti prinesel tudi tveganja za informacijsko varnost. To je pokazala tudi raziskava, ki smo jo opravili, saj se je kar nekaj uporabnikov spleta že srečalo z nevšečnostmi, ki jih povzročajo poskusi napadov. Tehnična zaščita ji lahko obvaruje le do določene stopnje, vendar popolne informacijske varnosti uporabnikom ne more zagotoviti. Pogosto je odvisno od nas samih ali bomo nasedli prevari in tako omogočili izvršitev napada, ali pa se bomo obvarovali.
Keywords:	svetovni splet, socialni inženiring, spletne prevare, zaščita, diplomske naloge
Place of publishing:	[Ljubljana
Publisher:	K. Grill]
Year of publishing:	2012
PID:	20.500.12556/DKUM-37080
UDC:	343.3/.7:004
COBISS.SI-ID:	2456554
NUK URN:	URN:SI:UM:DK:FBUUCRFA
Publication date in DKUM:	09.10.2012
Views:	1720
Downloads:	193
Metadata:
Categories:	FVV
:	Copy citation

Average score:	(0 votes)
Your score:	Voting is allowed only for logged in users.
Share:

Hover the mouse pointer over a document title to show the abstract or click on the title to get all document metadata.

Secondary language

Language:	English
Title:	RECOGNITION AND DEFENSE AGAINST SOCIAL ENGINEERING
Abstract:	The diploma paper deals with the internet social engineering which is more advanced, less risky and slightly altered classic social engineering which is based on human interaction. It is a process of taking advantage of people´s trust with the intention of acquiring certain information. In order to work, internet social engineers need computer technology and the internet which offers endless source of victims available all the time. The intention of internet social engineers is to carry out a fraud in order to reach the set goal. This is a great risk for information security since the techniques of attackers are very advanced and not noticeable to an average internet user. Since social engineering on the internet is getting more frequent, each user can become a victim. This can be observed also in the media where there are more and more frequent reports of internet frauds. The protection against the internet social engineering is very problematic because techniques as well as computer knowledge of users are very different. The success depends on the knowledge of the attacked and, particularly, on the inventiveness of the attackers, social engineers. They take advantage of people´s inclination to trust and offer help and, in this way, mislead the user to give away the information they are not justified to get. The development of the internet has given new space for work to social engineers, and many advantages as well as risks for information security to users. This has also been confirmed by the survey we have done since quite a few users have already had problems with attack attempts. Technical protection can only offer a certain extent of defense. However, total information security cannot be ensured. It frequently depends on us, whether we are going to believe a fraud or protect ourselves.

Comments

Leave comment

You must log in to leave a comment.

Comments (0)

0 - 0 / 0

There are no comments!

Back