Awareness of social engineering among IIUM students

Adam, Mutasim Elsadig and Yousif, Omer and Amodi, Yusra and Ibrahim, Jamaludin (2011) Awareness of social engineering among IIUM students. World of Computer Science and Information Technology Journal (WCSIT), 1 (9). pp. 409-413. ISSN 2221-0741

PDF - Published Version Restricted to Repository staff only Download (346kB) | Request a copy

Abstract

Although most organizations around the world currently pay more attention to securing information systems by means of sophisticated security tools, their information systems still remain breachable. The interpretation of this reality is that the hackers resort to the use of social engineering instead of using their technical skills to acquire information. The concept of social engineering is essentially to manipulate the users of a system, that are considered to be the weakest links on the chain, in order to get said information. The objective of this study is to prove that users of information systems are considered to be the real threat themselves. In this study, we assume that the lack of awareness of social engineering among users makes information systems susceptible to numerous kinds of breaches. In addition to that, the study aims to examine whether IT students possess more awareness of social engineering than students from other faculties. To address these problems, the data was collected from 245 students of the International Islamic University Malaysia (IIUM), via an online survey and questionnaire. Moreover, a phishing phone experiment conducted among a small number of students. The exhibited results showing that a total of 114 students were exposed to social engineering attacks during the last six months, and almost 38% of these attacks through E-mail.

Item Type:	Article (Journal)
Additional Information:	6202/38043
Uncontrolled Keywords:	Social Engineering; Phishing; Fraud; Awareness; IIUM.
Subjects:	T Technology > TA Engineering (General). Civil engineering (General) > TA166 Human engineering
Kulliyyahs/Centres/Divisions/Institutes (Can select more than one option. Press CONTROL button):	Kulliyyah of Information and Communication Technology Kulliyyah of Information and Communication Technology
Depositing User:	Jamaludin Ibrahim
Date Deposited:	05 Sep 2014 13:34
Last Modified:	05 Sep 2014 13:34
URI:	http://irep.iium.edu.my/id/eprint/38043

Actions (login required)

View Item