Generic Taxonomy of Social Engineering Attack

• Main Authors: Mohd Foozy, F, Ahmad, R., Abdollah, M. F., Yusof, R., Mas'ud, M. Z.
• Format: Conference or Workshop Item
• Language: English
• Published: 2011
• Subjects: Q Science (General)
• Online Access: http://eprints.utem.edu.my/id/eprint/191/1/MUiCET_2011_Cik_Feresa_binti_Mohd_Foozy-_by_Feresa.pdf; http://eprints.utem.edu.my/id/eprint/191/

Social engineering is a type of attack that allows unauthorized access to a system to achieve specific objective. Commonly, the purpose is to obtain information for social engineers. Some successful social engineering attacks get victims’ information via human based retrieval approach, example technique terms as dumpster diving or shoulder surfing attack to get access to password. Alternatively, victims’ information also can be stolen using technical-based method such as from pop-up windows, email or web sites to get the password or other sensitive information. This research performed a preliminary analysis on social engineering attack taxonomy that emphasized on types of technical-based social engineering attack. Results from the analysis become a guideline in proposing a new generic taxonomy of Social Engineering Attack (SEA).