Research on the Relationship between Personality Traits and Email Social Engineering Attacks－A Case Study of A Department of Ministry of National Defense

• Main Authors: Chun-Cheng Lee, 李俊成
• Other Authors: Shun-Po Chiu
• Format: Others
• Language: zh-TW
• Published: 2015
• Online Access: http://ndltd.ncl.edu.tw/handle/e4uv6q

碩士 === 萬能科技大學 === 資訊管理研究所在職專班 === 103 === Well-developed network technology today. Let us explore the world faster and easier flow of information. However, security information and communications has fiasco. Especially in recent years to focus on e-mail social engineering hacker attacks. The emergence of such attacks is often difficult to deal with, and cause significant losses. So the information security industry in the relevant protection solutions, for the risk of "person" under attack assessment is an important work, but studies are rare. Our research questions the relationship between personality traits and email that social engineering attack. First, we fully explore the literatures, discuss information security and social engineering on the existing research methods. And the FFM (The Five Factor Model) of psychology in principle, we sent 400 questionnaires to a department of Ministry of National Defense, and the study of social engineering exercise system using social engineering typical classification of e-mail attacks , And for the study of social engineering exercise system using social engineering typical classification of e-mail attacks. After data collection is complete, use SPSS and SmartPLS tools for analysis. We found a significant effect of personality traits and email social engineering attacks. In addition the results could provide academics understand the relationship between personality traits and email social engineering attack. We can recommend and evaluate information security education and training as a safety-related hardware and software information and support measures to build on the practice, in order to prevent that is hacked and risk mitigation. We can recommend and evaluate information security education and training programs and support information security-related hardware and software build on practical measures for the prevention and mitigation of risk by the hack.