Performing social engineering: A qualitative study of information security deceptions

作者:

Highlights:

• Study explores characteristics linked to successful deceptions according to social engineers.

• Research design involved qualitative interviews with social engineers.

• Data were analyzed through grounded theory.

• Findings indicate social engineering is a complex process intertwined with social context.

• Results are interpreted through symbolic interactionism and practice theory.

摘要

•Study explores characteristics linked to successful deceptions according to social engineers.•Research design involved qualitative interviews with social engineers.•Data were analyzed through grounded theory.•Findings indicate social engineering is a complex process intertwined with social context.•Results are interpreted through symbolic interactionism and practice theory.

论文关键词:Cybercrime,Social engineering,Symbolic interactionism,Practice theory,Qualitative analysis

论文评审过程:Received 11 September 2020, Revised 30 April 2021, Accepted 21 June 2021, Available online 25 June 2021, Version of Record 30 June 2021.

论文官网地址:https://doi.org/10.1016/j.chb.2021.106930