The Association between Social Engineering attacks and Employee Background: An Example of C Petroleum Company

碩士 === 國立臺北科技大學 === 管理學院資訊與財金管理EMBA專班 === 104 === Social engineering attacks (Social Engineering), is a use of human weakness, if employees lack of information security knowledge, make it easy for hackers bypass the computer security system protected to get business security by way of talk by phone,...

Full description

Bibliographic Details
Main Authors: Chen Wen, Chu, 朱震文
Other Authors: 吳建文
Format: Others
Language:zh-TW
Published: 2016
Online Access:http://ndltd.ncl.edu.tw/handle/qd5he6
Description
Summary:碩士 === 國立臺北科技大學 === 管理學院資訊與財金管理EMBA專班 === 104 === Social engineering attacks (Social Engineering), is a use of human weakness, if employees lack of information security knowledge, make it easy for hackers bypass the computer security system protected to get business security by way of talk by phone, email, or counterfeit identity of person, results serious business disruption or loss. This research used data mining to find out the association rules from social engineer attacks and employee background. This study took a petroleum Company, C, as an example and collected drill result as the basis of analysis. After data collection is complete, use WEKA tools for analysis. We found a significant effect of employee background and email social engineering attacks. Results indicates seniority between 15-30 years of age 55 or older employees are opportunities for successful social engineering attack is relatively high, the message subject to new technology or published books more easily induced click, through this thesis provides suggestions to make the organizations people to raise awareness in order to reduce the risk of social engineering attacks.