malware phishing mobile attacks.
Fuente:
Zenodo
Gespeichert in:
| 1. Verfasser: | |
|---|---|
| Format: | Recurso digital |
| Sprache: | Englisch |
| Veröffentlicht: |
Zenodo
2025
|
| Schlagworte: | |
| Online-Zugang: | |
| Tags: |
Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
|
| _version_ | 1866902031254421504 |
|---|---|
| author | Aidarus, Abdi Madar |
| author_facet | Aidarus, Abdi Madar |
| contents | <h3><span>ABSTRACT</span></h3> <p>We live today in the information age<span> </span>with users being<span> </span>able to access and share<span> </span>information<span> </span>freely<span> </span>by<span> </span>using<span> </span>both<span> </span>personal<span> </span>computers<span> </span>and<span> </span>their<span> </span>handheld<span> </span>devices.<span> </span>This, in turn, has been made possible by the Internet. However, this poses security<span> </span>risks as attempts are made to use this same environment in order to compromise the<span> </span>confidentiality, integrity and availability of information. Accordingly, there is an urgent<span> </span>need for users and organisations to protect their information resources from agents<span> </span>posing<span> </span>a security<span> </span>threat.</p> <p>Organisations<span> </span>typically<span> </span>spend<span> </span>large<span> </span>amounts<span> </span>of<span> </span>money<span> </span>as<span> </span>well<span> </span>as<span> </span>dedicating<span> </span>resources to improve their technological defences against general security threats.<span> </span>However,<span> </span>the<span> </span>agents<span> </span>posing<span> </span>these<span> </span>threats<span> </span>are<span> </span>adopting<span> </span>social<span> </span>engineering<span> </span>techniques<span> </span>in<span> </span>order<span> </span>to<span> </span>bypass<span> </span>the<span> </span>technical<span> </span>measures<span> </span>which<span> </span>organisations<span> </span>are<span> </span>putting<span> </span>in<span> </span>place.<span> </span>These<span> </span>social<span> </span>engineering<span> </span>techniques<span> </span>are<span> </span>often<span> </span>effective<span> </span>because<span> </span>they<span> </span>target<span> </span>human<span> </span>behaviour,<span> </span>something<span> </span>which<span> </span>the<span> </span>majority<span> </span>of<span> </span>researchers<span> </span>believe<span> </span>is<span> </span>a<span> </span>far<span> </span>easier<span> </span>alternative<span> </span>than<span> </span>hacking<span> </span>information<span> </span>systems.<span> </span>As<span> </span>such,<span> </span>phishing<span> </span>effectively<span> </span>makes<span> </span>use<span> </span>of<span> </span>a<span> </span>combination<span> </span>of<span> </span>social<span> </span>engineering<span> </span>techniques<span> </span>which<span> </span>involve<span> </span>crafty<span> </span>technical<span> </span>emails<span> </span>and<span> </span>website<span> </span>designs<span> </span>which<span> </span>gain<span> </span>the<span> </span>trust<span> </span>of<span> </span>their<span> </span>victims.</p> <p>Within an organisational context, there are a number of areas which phishers exploit.<span> </span>These<span> </span>areas<span> </span>include<span> </span>human<span> </span>factors,<span> </span>organizational<span> </span>aspects<span> </span>and<span> </span>technological<span> </span>controls.<span> </span>Ironically,<span> </span>these<span> </span>same<span> </span>areas<span> </span>serve<span> </span>simultaneously<span> </span>as<span> </span>security measures<span> </span>against phishing attacks. However, each of these three areas mentioned above are<span> </span>characterized by gaps which arise as a result of human involvement. As a result, the<span> </span>current<span> </span>approach<span> </span>to<span> </span>mitigating<span> </span>phishing<span> </span>threats<span> </span>comprises<span> </span>a<span> </span>single-layer<span> </span>defence<span> </span>model only. However, this study proposes a holistic model which integrates each of<span> </span>these three areas by strengthening the human element in each of these areas by<span> </span>means<span> </span>of<span> </span>a<span> </span>security<span> </span>awareness,<span> </span>training<span> </span>and<span> </span>education<span> </span>programme.</p> |
| format | Recurso digital |
| id | zenodo_https___doi_org_10_5281_zenodo_14892027 |
| institution | Zenodo |
| language | eng |
| publishDate | 2025 |
| publisher | Zenodo |
| record_format | zenodo |
| spellingShingle | malware phishing mobile attacks. Aidarus, Abdi Madar malware phishing mobile attacks <h3><span>ABSTRACT</span></h3> <p>We live today in the information age<span> </span>with users being<span> </span>able to access and share<span> </span>information<span> </span>freely<span> </span>by<span> </span>using<span> </span>both<span> </span>personal<span> </span>computers<span> </span>and<span> </span>their<span> </span>handheld<span> </span>devices.<span> </span>This, in turn, has been made possible by the Internet. However, this poses security<span> </span>risks as attempts are made to use this same environment in order to compromise the<span> </span>confidentiality, integrity and availability of information. Accordingly, there is an urgent<span> </span>need for users and organisations to protect their information resources from agents<span> </span>posing<span> </span>a security<span> </span>threat.</p> <p>Organisations<span> </span>typically<span> </span>spend<span> </span>large<span> </span>amounts<span> </span>of<span> </span>money<span> </span>as<span> </span>well<span> </span>as<span> </span>dedicating<span> </span>resources to improve their technological defences against general security threats.<span> </span>However,<span> </span>the<span> </span>agents<span> </span>posing<span> </span>these<span> </span>threats<span> </span>are<span> </span>adopting<span> </span>social<span> </span>engineering<span> </span>techniques<span> </span>in<span> </span>order<span> </span>to<span> </span>bypass<span> </span>the<span> </span>technical<span> </span>measures<span> </span>which<span> </span>organisations<span> </span>are<span> </span>putting<span> </span>in<span> </span>place.<span> </span>These<span> </span>social<span> </span>engineering<span> </span>techniques<span> </span>are<span> </span>often<span> </span>effective<span> </span>because<span> </span>they<span> </span>target<span> </span>human<span> </span>behaviour,<span> </span>something<span> </span>which<span> </span>the<span> </span>majority<span> </span>of<span> </span>researchers<span> </span>believe<span> </span>is<span> </span>a<span> </span>far<span> </span>easier<span> </span>alternative<span> </span>than<span> </span>hacking<span> </span>information<span> </span>systems.<span> </span>As<span> </span>such,<span> </span>phishing<span> </span>effectively<span> </span>makes<span> </span>use<span> </span>of<span> </span>a<span> </span>combination<span> </span>of<span> </span>social<span> </span>engineering<span> </span>techniques<span> </span>which<span> </span>involve<span> </span>crafty<span> </span>technical<span> </span>emails<span> </span>and<span> </span>website<span> </span>designs<span> </span>which<span> </span>gain<span> </span>the<span> </span>trust<span> </span>of<span> </span>their<span> </span>victims.</p> <p>Within an organisational context, there are a number of areas which phishers exploit.<span> </span>These<span> </span>areas<span> </span>include<span> </span>human<span> </span>factors,<span> </span>organizational<span> </span>aspects<span> </span>and<span> </span>technological<span> </span>controls.<span> </span>Ironically,<span> </span>these<span> </span>same<span> </span>areas<span> </span>serve<span> </span>simultaneously<span> </span>as<span> </span>security measures<span> </span>against phishing attacks. However, each of these three areas mentioned above are<span> </span>characterized by gaps which arise as a result of human involvement. As a result, the<span> </span>current<span> </span>approach<span> </span>to<span> </span>mitigating<span> </span>phishing<span> </span>threats<span> </span>comprises<span> </span>a<span> </span>single-layer<span> </span>defence<span> </span>model only. However, this study proposes a holistic model which integrates each of<span> </span>these three areas by strengthening the human element in each of these areas by<span> </span>means<span> </span>of<span> </span>a<span> </span>security<span> </span>awareness,<span> </span>training<span> </span>and<span> </span>education<span> </span>programme.</p> |
| title | malware phishing mobile attacks. |
| topic | malware phishing mobile attacks |
| url | https://doi.org/10.5281/zenodo.14892027 |