The Influence Factors of Social Engineering Avoidance－An Example of High School Students

• Main Authors: Tsai, Cheng-Han, 蔡承翰
• Other Authors: Fan, Tai- Sheng
• Format: Others
• Language: zh-TW
• Published: 2016
• Online Access: http://ndltd.ncl.edu.tw/handle/n38nv9

碩士 === 國立屏東科技大學 === 資訊管理系所 === 104 === According to the survey done by InsightXplorer, about 75.7% of the populations aged 15-19 possess a smart mobile device. Nowadays, more hackers take advantages of social engineering techniques, by sending emails with malware or providing malicious links, to steal personal information from web-users. Previous social engineering related studies focused most on behaviors of users at institutions of public tertiary or college students. Investigations targeting teenagers at high school level are rarely seen. After a careful literature review, five factors were generalized for the study: Information Security Literacy, Information Security Training, Information Security Behavior, Experience on Information Security Event and Social Engineering Avoidance. A total of 1497 valid questionnaires were collected from high school students. Factor analysis, reliability and validity test, t-test, ANOVA and Scheffé test were conducted. A Structural Equation Model was established to verify the relationship among factors. The results of the study show a strong relationship between Information Security Literacy and Social Engineering Avoidance. It also demonstrated that proper Information Security Training can affect one’s Information Security Literacy, prompting the individual to establish a good Information Security Behavior, thus to avoid a social engineering trap. However, the impact of Experience on Information Security Event on Social Engineering Avoidance is not significant. It is concluded that if an individual did not enhance his/her Information Security Literacy or establish a good Information Security Behavior beforehand, it would be difficult to get away with the hazards of a social engineering trap. The findings of this study should be considerably helpful in providing guidelines when conducting information security related research or scale development in the future.