Social Engineering as Social Process

• In Event: Computers and Network Intrusions: Towards an Understanding of Criminality

Abstract

This presentation details the progress of an ongoing research project investigating “social engineering” or the manipulation of the people involved in information security. This research involves extensive semi-structured interviews of social engineers, security auditors, and information technology professionals. Both qualitative and quantitative data are gathered and analyzed. Issues explored include definitions of social engineering, the process and techniques of social engineering, the learning dimensions of the phenomenon, and related matters. Challenges for the research and projections for the project’s future will also be discussed.

Authors

• Kevin Steinmetz, Kansas State University

• Richard Goe, Kansas State University

• Alexandra Pimentel, Kansas State University