Spletno ribarjenje

vpliv karakteristik lažnih sporočil na njihovo prepoznavo

Matevž Glinšek (Author), Simon Vrhovec (Mentor)

Abstract

Splet je prinesel veliko sprememb. S različnimi funkcijami nam je olajšal življenje tako v osebnem kot v poslovnem življenju. Komuniciranje na lokalni ter globalni ravni je postalo enostavno in del našega vsakdana, saj lahko z nekaj kliki vzpostavimo stik s prijatelji, družino ali poslovnimi partnerji, ne glede na to, kje na svetu se nahajajo. Vendar pa so z napredkom te tehnologije prišle tudi nove grožnje, med katerimi je najbolj izpostavljeno ribarjenje. Napadalci se s to metodo osredotočijo na najranljivejši del sistema, kar predstavljajo uporabniki. Do uspešnega napada lahko pride že samo z enim nepremišljenem kliku. Podjetja in organizacije namenijo veliki del svojih virov in sredstev za usposabljanje in ozaveščanje uporabnikov o sofisticiranih metodah socialnega inžiniringa, katerega uporabljajo napadalci pri ribarjenju. Kljub temu še vedno uporabniki predstavljajo najšibkejši člen sistema. V diplomski nalogi smo se osredotočili na posamezne elemente lažnih elektronskih sporočil ter kako vplivajo na uporabnikovo zaznavo teh sporočil. Za boljše razumevanje smo pripravili eksperiment, v katerem so respondenti na primerih slik elektronske pošte morali oceniti, ali gre za lažno elektronsko pošto ali ne. Te elektronske pošte smo pripravili tako, da je v njih izpostavljena ali neizpostavljena značilnost lažnih elektronskih sporočil. S pomočjo statističnih testov smo analizirali podatke, zbrane med eksperimentom. Ugotovili smo, da obstaja povezava med določenimi elementi elektronskih sporočil in njihovo prepoznavo s strani uporabnikov. Dimenzija oponašanje procesov ali praks je negativno povezana s pravilno prepoznavo, medtem ko dimenzija predhodne izpostavljenosti lažnim elektronskim sporočilom je pozitivno povezana z napačno zaznavo, kar je v nasprotju z našimi pričakovanji. S doseženimi rezultati imamo boljše razumevanje tematike ribarjenja in lažnih elektronskih sporočil ter tako prispevamo k nadaljnjimi raziskavam ter izobraževanju in ozaveščanju.

Keywords

spletno ribarjenje;lažna elektronska sporočila;socialni inženiring;diplomske naloge;

Data

Language:	Slovenian
Year of publishing:	2024
Typology:	2.11 - Undergraduate Thesis
Organization:	UM FVV - Faculty of Criminal Justice
Publisher:	[M. Glinšek]
UDC:	004.056.53(043.2)
COBISS:	211025411
Views:	0
Downloads:	4
Average score:	0 (0 votes)
Metadata:

Other data

Secondary language:	English
Secondary title:	Online phishing: the effect of message characteristics on their recognition
Secondary abstract:	The internet has brought many changes. With various features, it has made our lives easier both personally and professionally. Communication on both local and global levels has become easy and a part of our daily lives, as we can connect with friends, family, or business partners with just a few clicks, no matter where in the world they are located. However, with the advancement of this technology, new threats have also emerged, among which phishing is the most prominent. Attackers using this method focus on the most vulnerable part of the system, which are the users. A successful attack can occur with just one careless click. Companies and organizations allocate a significant portion of their resources to training and educating users about the sophisticated social engineering methods used by attackers in phishing. Despite these efforts, users still represent the weakest link in the system. In this thesis, we focused on the individual elements of fraudulent emails and how they affect users' perception of these messages. To gain a better understanding, we conducted an experiment in which respondents had to evaluate whether the emails shown in images were fraudulent or not. We designed these emails to either highlight or conceal characteristics of fraudulent emails. Using statistical tests, we analyzed the data collected during the experiment. We found a correlation between certain elements of the emails and their recognition by users. These elements are the dimension mimics a workplace process or practise, which negatively effects the correct perception of the message. The second element is the dimension of prior exposure to phishing emails, which has a positive effect on the incorrect perception of the message. These results provide a better understanding of phishing and fraudulent emails, contributing to further research, education, and awareness efforts.
Secondary keywords:	Phishing prevare;Univerzitetna in visokošolska dela;
Type (COBISS):	Bachelor thesis/paper
Thesis comment:	Univ. v Mariboru, Fak. za varnostne vede, Ljubljana
Pages:	VII f., [37] str.
ID:	25258500