Non-Technical Cyber-Attacks and International Cybersecurity: The Case of Social  Engineering

Nezir Akyeşilmen; Amal Alhosban

Makale detayları

Non-Technical Cyber-Attacks and International Cybersecurity: The Case of Social Engineering

Yazarlar:

Nezir Akyeşilmen | Amal Alhosban

Yayıncı:

Gaziantep University

Ana Başlıklar:

Uluslararası Güvenlik

Dergi:

Gaziantep Üniversitesi Sosyal Bilimler Dergisi Vol.23 Issue 1, pp.342-360

Belge Tipi:

Makale

Yayın Tarihi:

1/2024

Belge Dili:

İngilizce

Document ID (Org No.):

2001310455

pISSN:

1303-0094

Anahtar kelimeler:

Özet:

 This paper aims to provide an overview of social engineering attacks, and their impacts on cybersecurity, including national and international security, and figures out detection techniques, and major methods for countermeasure. How do social engineering attacks affect national and international security? And why is it so hard to cope with them? Seeking for answers to these questions, this paper applies qualitative research methods particularly literature review and case analysis. While qualitative research methods are predominantly employed, quantitative methods will also be utilized when deemed essential. Social engineering attacks, also referred to as online fraud, are a type of attack that typically necessitates minimal or no technical knowledge. Social engineering attacks, instead benefit from the weaknesses and mistakes of individuals, since the user is accepted as the weakest link in cybersecurity. Many studies have shown that the vast majority of successful cyber-attacks in the digital world are social engineering SE because countering them is more difficult than countering technical cyber-attacks. Based on the analysis of some major cyber-attacks such as the intervention in the 2016 US Presidential elections, the hacking of CIA director, John Brennan in 2015, and Stuxnet in 2010, the paper figures out that social engineering attacks have a tremendous impact on cybersecurity on the individual, institutional, societal, national, and international levels. Penetration tests and training for raising awareness are the prolific ways to mitigate social engineering attacks.

 This paper aims to provide an overview of social engineering attacks, and their impacts on cybersecurity, including national and international security, and figures out detection techniques, and major methods for countermeasure. How do social engineering attacks affect national and international security? And why is it so hard to cope with them? Seeking for answers to these questions, this paper applies qualitative research methods particularly literature review and case analysis. While qualitative research methods are predominantly employed, quantitative methods will also be utilized when deemed essential. Social engineering attacks, also referred to as online fraud, are a type of attack that typically necessitates minimal or no technical knowledge. Social engineering attacks, instead benefit from the weaknesses and mistakes of individuals, since the user is accepted as the weakest link in cybersecurity. Many studies have shown that the vast majority of successful cyber-attacks in the digital world are social engineering SE because countering them is more difficult than countering technical cyber-attacks. Based on the analysis of some major cyber-attacks such as the intervention in the 2016 US Presidential elections, the hacking of CIA director, John Brennan in 2015, and Stuxnet in 2010, the paper figures out that social engineering attacks have a tremendous impact on cybersecurity on the individual, institutional, societal, national, and international levels. Penetration tests and training for raising awareness are the prolific ways to mitigate social engineering attacks.

 This paper aims to provide an overview of social engineering attacks, and their impacts on cybersecurity, including national and international security, and figures out detection techniques, and major methods for countermeasure. How do social engineering attacks affect national and international security? And why is it so hard to cope with them? Seeking for answers to these questions, this paper applies qualitative research methods particularly literature review and case analysis. While qualitative research methods are predominantly employed, quantitative methods will also be utilized when deemed essential. Social engineering attacks, also referred to as online fraud, are a type of attack that typically necessitates minimal or no technical knowledge. Social engineering attacks, instead benefit from the weaknesses and mistakes of individuals, since the user is accepted as the weakest link in cybersecurity. Many studies have shown that the vast majority of successful cyber-attacks in the digital world are social engineering SE because countering them is more difficult than countering technical cyber-attacks. Based on the analysis of some major cyber-attacks such as the intervention in the 2016 US Presidential elections, the hacking of CIA director, John Brennan in 2015, and Stuxnet in 2010, the paper figures out that social engineering attacks have a tremendous impact on cybersecurity on the individual, institutional, societal, national, and international levels. Penetration tests and training for raising awareness are the prolific ways to mitigate social engineering attacks.

 Bu makale, sosyal mühendislik saldırılarına ve bunların ulusal ve uluslararası güvenlik de dahil olmak üzere siber güvenlik üzerindeki etkilerine genel bir bakış sunmayı amaçlamakta, tespit tekniklerini ve karşı önlem için başlıca yöntemleri ortaya koymaktadır. Sosyal mühendislik saldırıları ulusal ve uluslararası güvenliği nasıl etkiler? Peki onlarla baş etmek neden bu kadar zor? Bu soruların yanıtlarını arayan bu makalede, özellikle literatür taraması ve vaka analizi olmak üzere nitel araştırma yöntemleri kullanılmaktadır. Araştırmada ağırlıklı olarak nitel araştırma yöntemleri kullanılmakla birlikte, gerekli görüldüğünde nicel araştırma yöntemlerinden de yararlanılacaktır. Online dolandırıcılık olarak da bilinen sosyal mühendislik saldırıları çoğu zaman az teknik bilgi ya da teknik bilgi gerektirmeyen nitelikte saldırılardır. Kullanıcı siber güvenlikte en zayıf halka olarak kabul edildiğinden, sosyal mühendislik saldırıları bireylerin zaaflarından ve hatalarından faydalanır. Birçok çalışma, dijital dünyadaki başarılı siber saldırıların büyük çoğunluğunun sosyal mühendislik SE saldırıları olduğunu, çünkü bunlara karşı koymanın teknik siber saldırılara karşı koymaktan daha zor olduğunu göstermiştir. 2016 ABD Başkanlık seçimlerine müdahale, 2015te CIA direktörü John Brennanin hacklenmesi ve 2010da Stuxnet gibi bazı büyük siber saldırıların analizine dayanan makale, sosyal mühendislik saldırılarının bireysel, kurumsal, toplumsal, ulusal ve uluslararası düzeyde siber güvenlik üzerinde çok büyük etkiye sahip olduğunu ortaya koymaktadır. Sızma testleri ve farkındalığı artırmaya yönelik eğitimler, sosyal mühendislik saldırılarını azaltmanın etkili yöntemlerindendir.

Makale detayları

Non-Technical Cyber-Attacks and International Cybersecurity: The Case of Social Engineering

Yazarlar:

Nezir Akyeşilmen | Amal Alhosban

Yayıncı:

Gaziantep University

Ana Başlıklar:

Uluslararası Güvenlik

Dergi:

Gaziantep Üniversitesi Sosyal Bilimler Dergisi Vol.23 Issue 1, pp.342-360

Belge Tipi:

Makale

Yayın Tarihi:

1/2024

Belge Dili:

İngilizce

Document ID (Org No.):

2001310455

pISSN:

1303-0094

Social Engineering

Cybersecurity

Human Error

International Security

PhishingSosyal mühendislik

Siber Güvenlik

İnsan hatası

Uluslararası güvenlik

Oltalama.

Sayı

Makale detayları

Yazarlar: Nezir Akyeşilmen | Amal Alhosban

Yayıncı: Gaziantep University

Ana Başlıklar: Uluslararası Güvenlik

Dergi: Gaziantep Üniversitesi Sosyal Bilimler Dergisi Vol.23 Issue 1, pp.342-360

Belge Tipi: Makale

Yayın Tarihi: 1/2024

Belge Dili: İngilizce

Document ID (Org No.): 2001310455

pISSN: 1303-0094

Sayı

Yazarlar:

Nezir Akyeşilmen | Amal Alhosban

Yayıncı:

Gaziantep University

Ana Başlıklar:

Uluslararası Güvenlik

Dergi:

Gaziantep Üniversitesi Sosyal Bilimler Dergisi Vol.23 Issue 1, pp.342-360

Belge Tipi:

Makale

Yayın Tarihi:

1/2024

Belge Dili:

İngilizce

Document ID (Org No.):

2001310455

pISSN:

1303-0094