Spear phishing: dovzetnost uporabnikov elektronske pošte

diplomsko delo visokošolskega študijskega programa Informacijska varnost

Aljaž Sok (Avtor), Kaja Prislan (Mentor), Anže Mihelič (Komentor)

Povzetek

Phishing predstavlja eno izmed najbolj razširjenih groženj v kibernetskem prostoru. Čez leta so se metode storilcev razvile in spremenile, pojavile so se nove pojavne oblike, s katerimi skušajo storilci pretentati uporabnike interneta in drugih omrežij. Med vse bolj razširjene oblike phishinga sodi spear phishing, ki je ciljni napad na posameznika ali organizacijo. Storilci se skušajo preko elektronske pošte ali lažne spletne strani dokopati do zaupnih podatkov, ki bi jim nadalje lahko prinesli finančno korist. V diplomski nalogi smo raziskali problematiko phishinga, njegovo zgodovino in sodobne metode, ki jih storilci najpogosteje uporabljajo. Osredotočili smo se na spear phishing, ki velja za eno najuspešnejših oblik phishinga in povzroča veliko finančne škode posameznikom in organizacijam. Z raziskavo smo preverjali dovzetnost uporabnikov elektronske pošte na spear phishing napade. S pomočjo kvazi eksperimenta smo preizkušali odzivnost uporabnikov na sumljivo elektronsko pošto. Vzorec naše raziskave so predstavljali mladi odrasli, za katere vemo, da so vsakodnevno vpeti v kibernetski prostor. Glavna ugotovitev je, da so mladi odrasli po večini sicer seznanjeni s problematiko, vendar nekateri še kljub temu nasedejo prevari. Prav tako smo skozi pregled stanja ugotovili, da je na področju zaščite uporabnikov pred phishingom potrebno še veliko obveščanja in izobraževanja o nevarnostih, ki jih ta prinaša.

Ključne besede

diplomske naloge;phishing;spear phishing;napad;elektronska pošta;uporabniki;

Podatki

Jezik:	Slovenski jezik
Leto izida:	2019
Tipologija:	2.11 - Diplomsko delo
Organizacija:	UM FVV - Fakulteta za varnostne vede
Založnik:	[A. Sok]
UDK:	343.3/.7:004.738.5(043.2)
COBISS:	3773162
Št. ogledov:	776
Št. prenosov:	104
Ocena:	0 (0 glasov)
Metapodatki:

Ostali podatki

Sekundarni jezik:	Angleški jezik
Sekundarni naslov:	Spear phishing: susceptibility of e-mail users
Sekundarni povzetek:	For decades now, phishing represents a big problem in the cyber world. Through the years, the phishing is developing and growing, new methods are appearing daily, with which the attackers try to trick the users of internet networks. One of the most successful forms of phishing is spear phishing, i.e. the targeted attack on individual or organization. Through e-mail or website, the attackers try to get beneficial confidential data. In the diploma thesis, the problem of phishing is examined; moreover, the history of phishing and the methods used by the attackers are described. The focus is on spear-phishing since it represents the most successful form of phishing and causes economic damage to individuals and companies. It is established that a lot has to be done in the field of user protection. It would be necessary to inform and educate more about the danger of spear-phishing. In the research, we tested the susceptibility of e-mail users to spear-phishing attacks. By the means of quasi-experiment, we tested the response of users to suspicious e-mail. The research was focused on young adults who use the internet daily. It was concluded that the young adults are instructed with the problem of spear phishing, but some of them still fall for the deception. Moreover, it was established that a lot of information and education about the danger of spear phising is neccessary in the field of costumer protection.
Sekundarne ključne besede:	phishing;spear-phishing;attack;e-mail;users;
Vrsta dela (COBISS):	Diplomsko delo/naloga
Komentar na gradivo:	Univ. v Mariboru, Fak. za varnostne vede, Ljubljana
Strani:	V, 27 str.
ID:	11239519