Development of Methods for Organizational Resistance to Social Engineering

Student: Toroshchina Muza

Supervisor: Eldar Beibutov

Educational Programme: Information Security Management (Master)

Year of Graduation: 2018

This final qualifying work is about the problem of usage of social engineering in relation to organizations. The purpose of the master's thesis is to formulate a methodology that companies can use to implement organization measures for self-protection from social engineering. The study of this problem contains several directions. The main attacking techniques and "in" channels, tendencies in the field of social engineering, as well as specific cases, practice and hacking scenarios are considered. A system for evaluation of protection of companies from social engineering was developed based on the analysis of these parameters, levels of protection that organizations need to create are developed, and basic measures of organization counteraction for each type of attack are proposed. As a result, a method was developed, the usage of which will prevent and deal with social engineering attacks on companies.

Student Theses at HSE must be completed in accordance with the University Rules and regulations specified by each educational programme.

Summaries of all theses must be published and made freely available on the HSE website.

The full text of a thesis can be published in open access on the HSE website only if the authoring student (copyright holder) agrees, or, if the thesis was written by a team of students, if all the co-authors (copyright holders) agree. After a thesis is published on the HSE website, it obtains the status of an online publication.

Student theses are objects of copyright and their use is subject to limitations in accordance with the Russian Federation’s law on intellectual property.

In the event that a thesis is quoted or otherwise used, reference to the author’s name and the source of quotation is required.

Search all student theses