Shaping information security behaviors related to social engineering attacks

↓ Direkt till sidans innehåll
↓ Direkt till sidans sekundära innehåll (sidomenyn)

Utökad sökning > "information security" > Shaping information...

Rocha Flores, WaldoKTH,Elkraftteknik,Industrial information and control systems (författare)

Shaping information security behaviors related to social engineering attacks

BokEngelska2016

Förlag, utgivningsår, omfång ...

KTH Royal Institute of Technology,2016
xv, 156 s.
electronicrdacarrier

Nummerbeteckningar

LIBRIS-ID:oai:DiVA.org:kth-186113
ISBN:9789175959696
https://urn.kb.se/resolve?urn=urn:nbn:se:kth:diva-186113URI

Kompletterande språkuppgifter

Språk:engelska
Sammanfattning på:engelska

Ingår i deldatabas

SwePubSwePub

Klassifikation

Ämneskategori:vet swepub-contenttype
Ämneskategori:dok swepub-publicationtype

Serie

TRITA-EE,1653-5146 ;2016:061

Anmärkningar

QC 20160503
Today, few companies would manage to continuously stay competitive without the proper utilization of information technology (IT). This has increased companies’ dependency of IT and created new threats that need to be addressed to mitigate risks to daily business operations. A large extent of these IT-related threats includes hackers attempting to gain unauthorized access to internal computer networks by exploiting vulnerabilities in the behaviors of employees. A common way to exploit human vulnerabilities is to deceive and manipulate employees through the use of social engineering. Although researchers have attempted to understand social engineering, there is a lack of empirical research capturing multilevel factors explaining what drives employees’ existing behaviors and how these behaviors can be improved. This is addressed in this thesis.The contribution of this thesis includes (i) an instrument to measure security behaviors and its multilevel determinants, (ii) identification of multilevel variables that significantly influence employees’ intent for behavior change, (iii) identification of what behavioral governance factors that lay the foundation for behavior change, (iv) identification that national culture has a significant effect on how organizations cope with behavioral information security threats, and (v) a strategy to ensure adequate information security behaviors throughout an organization.This thesis is a composite thesis of eight papers. Paper 1 describes the instrument measuring multilevel determinants. Paper 2 and 3 describes how security knowledge is established in organizations, and the effect on employee information security awareness. In Paper 4 the root cause of employees’ intention to change their behaviors and resist social engineering is described. Paper 5 and 8 describes how the instrument to measure social engineering security behaviors was developed and validated through scenario-based surveys and phishing experiments. Paper 6 and 7 describes experiments performed to understand reason to why employees fall for social engineering. Finally, paper 2, 5 and 6 examines the moderating effect of national culture.

Ämnesord och genrebeteckningar

TEKNIK OCH TEKNOLOGIER Elektroteknik och elektronik Annan elektroteknik och elektronik hsv//swe
ENGINEERING AND TECHNOLOGY Electrical Engineering, Electronic Engineering, Information Engineering Other Electrical Engineering, Electronic Engineering, Information Engineering hsv//eng
Information security
Behavioral information security
Social engineering
Phishing
Measuring information security behaviors
Information security governance
Experiments
National culture
Mixed method research design
Quantitative methods
Industrial Information and Control Systems
Industriella informations- och styrsystem

Biuppslag (personer, institutioner, konferenser, titlar ...)

Ekstedt, Mathias,ProfessorKTH,Elkraftteknik(Swepub:kth)u18mctxd (preses)
Kowalski, Stewart,ProfessorNorwegian University of Science and Technology (opponent)
KTHElkraftteknik (creator_code:org_t)

Internetlänk

Hitta via bibliotek

Shaping information security behaviors related to social engineering attacks (Sök publikationen i LIBRIS)

Till lärosätets databas

Hitta mer i SwePub

Av författaren/redakt...: Rocha Flores, Wa ...; Ekstedt, Mathias ...; Kowalski, Stewar ...

Om ämnet

TEKNIK OCH TEKNOLOGIER: TEKNIK OCH TEKNO ...; och Elektroteknik oc ...; och Annan elektrotek ...

Delar i serien: TRITA-EE,

Av lärosätet: Kungliga Tekniska Högskolan

Sök utanför SwePub

Sök vidare i:: Google; Google Book Search; Google Scholar

Kungliga biblioteket hanterar dina personuppgifter i enlighet med EU:s dataskyddsförordning (2018), GDPR. Läs mer om hur det funkar här.
Så här hanterar KB dina uppgifter vid användning av denna tjänst.

LIBRIS.kb.se