Cyber Security: Effect of Social Engineering in Cyber Attacks - Risks, Vulnerabilities and Countermeasures

Cagdas Baran Bilim

Bachelor's thesis

Abstract:

Social engineering attacks are increasingly used by cybercriminals to deceive individuals and organizations into disclosing sensitive information. As the use of social engineering attacks continues to rise, it is crucial to understand the different social engineering tactics and the impact of human factors on these attacks. This study aims to explore the level of social engineering awareness and knowledge among a sample of 100 participants, consisting of 57 males and 43 females, in order to identify any differences in awareness and knowledge between male and female participants. A 30-item questionnaire was developed to assess the participants' knowledge of social engineering, and the data collected were analysed using the Pearson Chi-Square Test. The findings suggest that there is no significant difference in the level of awareness of social engineering concepts and potential risks associated with social engineering attacks between males and females. However, there is a significant difference in the level of education and training on how to identify and protect against social engineering attacks between males and females, with females being less likely to have received training or education on this topic. The study highlights the need for organizations to provide gender-inclusive training on preventing social engineering attacks to increase awareness and reduce the risk of successful attacks. In conclusion, this study highlights the importance of understanding social engineering tactics, and the impact of human factors on these attacks. By identifying gender differences in social engineering awareness and knowledge, educators and policymakers can tailor cybersecurity education programs to address these differences. Moreover, this study provides guidance on countermeasures that organizations can implement to mitigate social engineering attacks. Overall, this research contributes to the understanding of social engineering attacks and the measures that can be taken to protect against them.

Keywords

Cybersecurity, Social Engineering, Risks, Cyberattacks, Cybercrimes, Threats

Language used: English

Date on which the thesis was submitted / produced: 17. 3. 2023

Thesis defence

• Date of defence: 15. 5. 2023
• Supervisor: doc. Ing. Jan Tyrychtr, Ph.D.
• Reader: Tomáš Benda, Ing.

Czech University of Life Sciences Prague

Faculty of Economics and Management

Bachelor programme:
Informatics