An attacker has several options for breaking through an organization’s in formation security protections. Human factors are determined to be the source of some of the worst cyber-attacks every day in every business. The human method, often known as “social engineering” , is the hardest to cope with. This paper examines many types of social engineering. The aim of this study was to ascertain the level of awareness of social engineering , provide appropriate solutions to problems to reduce those engineering risks, and avoid obstacles that could prevent increasing awareness of the dangers of social engineering — Shaqra University (Kingdom of Saudi Arabia). A questionnaire was developed and surveyed 508 employees working at different organizations. The overall Cronbach’s alpha was 0.756, which very good value, the correlation coefficient between each of the item s is statistically significant at 0.01 level. The study showed that 63.4% of the surveyed sample had no idea about social engineering. 67.3% of the total sample s ha d no idea about social engineering threats. 42.1% have a weak knowledge of social engineering and only 7.5% of the sample ha d a good knowledge of social engineering. 64.7% of the male did not know what social engineering is. 68.0% of the administrators did not know what social engineering is . Employee s who did not take course s showed statistically significant differences.
KeywordsCybersecurityAttacksSocial EngineeringSecurityAwareness of Cybersecurity
Montañez, R., Golob, E. and Xu, S. (2020) Human Cognition through the Lens of Social Engineering Cyberattacks. Frontiers in Psychology, 11, Article 1755. https://doi.org/10.3389/fpsyg.2020.01755
Singano, J.O. (2020) Establishing Awareness of Users on Improved Information Security in Health Institution: A Case Study of Muhimbili National Hospital-Mloganzila.
Aldawood, H.A. and Skinner, G. (2019) A Critical Appraisal of Contemporary Cyber Security Social Engineering Solutions: Measures, Policies, Tools and Applications. 2018 26th International Conference on Systems Engineering (ICSEng), Sydney, 18-20 December 2018, 1-6. https://doi.org/10.1109/ICSENG.2018.8638166
LeClair, J. (2015) Social Engineering: A Cybersecurity Threat. Transactions of the American Nuclear Society, 113, 100-101.
Wang, Z., Sun, L. and Zhu, H. (2020) Defining Social Engineering in Cybersecurity. IEEE Access, 8, 85094-85115. https://doi.org/10.1109/ACCESS.2020.2992807
Alsharif, M., Mishra, S. and AlShehri, M. (2021) Impact of Human Vulnerabilities on Cybersecurity. Computer Systems Science and Engineering, 40, 1153-1166. https://doi.org/10.32604/csse.2022.019938
AlMindeel, R. and Martins, J.T. (2021) Information Security Awareness in a Developing Country Context: Insights from the Government Sector in Saudi Arabia. Information Technology & People, 34, 770-788. https://doi.org/10.1108/ITP-06-2019-0269
Refaat, S., Supervisor, H.Q. and Mahmoud, A.Y. (2019) Analysis and Evaluation of Cybersecurity Techniques for Social Engineering. Al-Azhar University, Faculty of Engineering & Information Technology, Gaza. http://dstore.alazhar.edu.ps/xmlui/bitstream/handle/123456789/1599/20163653.pdf?sequence=1&isAllowed=y
Aldawood, H., Alashoor, T. and Skinner, G. (2020) Does Awareness of Social Engineering Make Employees More Secure? International Journal of Computer Applications, 177, 45-49. https://doi.org/10.5120/ijca2020919891
Darrion, D.C. and Peoples, C. (2022) Social Engineering and Vulnerability Detection in the Electronic Healthcare Record Era. ProQuest. https://www.proquest.com/openview/356b8b7cb05e3e48a55a770e6616a898/1?pq-origsite=gscholar&cbl=18750&diss=y
Scott, J. and Kyobe, M. (2021) Trends in Cybersecurity Management Issues Related to Human Behaviour and Machine Learning. 2021 International Conference on Electrical, Computer and Energy Technologies (ICECET), Cape Town, 9-10 December 2021, 1-8. https://doi.org/10.1109/ICECET52533.2021.9698626
Matos, J., Dias, T., Ferreira, H. and Faria, J. (2022) Increasing the Dependability of Internet-of-Things Systems in the Context of End-User Development Environments.
Alharthi, D.N. and Regan, A.C. (2020) Social Engineering Defense Mechanisms: A Taxonomy and a Survey of Employees’ Awareness Level. Proceedings of the 2020 Computing Conference, Volume 1, 521-541. https://doi.org/10.1007/978-3-030-52249-0_35
Alert Logic Staff (2021) Why Are Humans the Weakest Link in Cybersecurity? Alert Logic, No. March, 1-9. https://www.alertlogic.com/blog/why-humans-weakest-link-cybersecurity
Breda, F., Barbosa, H. and Morais, T. (2017) Social Engineering and Cyber Security. INTED2017 Proceedings, Vol. 1, 4204-4211. https://doi.org/10.21125/inted.2017.1008
Rashid, A., et al. (2018) Scoping the Cyber Security Body of Knowledge. IEEE Security and Privacy, 16, 96-102. https://doi.org/10.1109/MSP.2018.2701150
Bullee, J.W. and Junger, M. (2020) How Effective Are Social Engineering Interventions? A Meta-Analysis. Information and Computer Security, 28, 801-830. https://doi.org/10.1108/ICS-07-2019-0078
Frumento, E. (2018) Estimates of the Number of Social Engineering Based Cyber-Attacks into Private or Government Organizations. Dogana Project. https://www.dogana-project.eu/index.php/social-engineering-blog/11-social-engineering/94-estimates-of-social-engineering-attacks
Fan, W., Lwakatare, K. and Rong, R. (2017) Social Engineering: I-E Based Model of Human Weakness for Attack and Defense Investigations. International Journal of Computer Network and Information Security, 9, 1-11. https://doi.org/10.5815/ijcnis.2017.01.01
Alharthi, D. and Regan, A. (2021) A Literature Survey and Analysis on Social Engineering Defense Mechanisms and Infosec Policies. International Journal of Network Security & Its Applications, 13, 41-61. https://doi.org/10.5121/ijnsa.2021.13204
Sarginson, N. (2020) Securing Your Remote Workforce against New Phishing Attacks. Computer Fraud & Security, 2020, 9-12. https://doi.org/10.1016/S1361-3723(20)30096-8
Junger, M., Montoya, L. and Overink, F.J. (2017) Priming and Warnings Are Not Effective to Prevent Social Engineering Attacks. Computers in Human Behavior, 66, 75-87. https://doi.org/10.1016/j.chb.2016.09.012
Borkovich, D.J. and Joseph Skovira, R. (2019) Cybersecurity Inertia and Social Engineering: Who’s Worse, Employees or Hackers? Issues in Information Systems, 20, 139-150.
Alsulami, M.H., et al. (2021) Measuring Awareness of Social Engineering in the Educational Sector in the Kingdom of Saudi Arabia. Information, 12, Article No. 208. https://doi.org/10.3390/info12050208
Salahdine, F. and Kaabouch, N. (2019) Social Engineering Attacks: A Survey. Future Internet, 11, Article No. 89. https://doi.org/10.3390/fi11040089
Conteh, N.Y. and Schmick, P.J. (2016) Cybersecurity: Risks, Vulnerabilities and Countermeasures to Prevent Social Engineering Attacks. The International Journal of Advanced Computer Research, 6, 31-38. https://doi.org/10.19101/IJACR.2016.623006
Kansagra, D., Kumhar, M. and Jha, D. (2016) Ransomware: A Threat to Cyber Security. Computer Science: Electronic Journals, 7, 224-227.
Alqurashi, R.K. (2020) Cyber Attacks and Impacts: A Case Study in Saudi Arabia. International Journal of Advanced Trends in Computer Science and Engineering, 9, 217-224. https://doi.org/10.30534/ijatcse/2020/33912020
Heartfield, R., Loukas, G. and Gan, D. (2016) You Are Probably Not the Weakest Link: Towards Practical Prediction of Susceptibility to Semantic Social Engineering Attacks. IEEE Access, 4, 6910-6928. https://doi.org/10.1109/ACCESS.2016.2616285
Airehrour, D., Nair, N.V. and Madanian, S. (2018) Social Engineering Attacks and Countermeasures in the New Zealand Banking System: Advancing a User-Reflective Mitigation Model. Information, 9, Article No. 110. https://doi.org/10.3390/info9050110