Gaining Access with Social Engineering: An Empirical Study of the Threat

Workman, Michael

doi:10.1080/10658980701788165

Cited by 111 publications

(53 citation statements)

References 77 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…''for quality assurance purposes"), along with increasing use of global positioning satellite systems (GPS) and radio frequency identification (RFID) for tracking mobile workers (Aiello, 1993;Workman, 2008b).…”

Section: Monitoring: the Unblinking Eyementioning

confidence: 99%

A field study of corporate employee monitoring: Attitudes, absenteeism, and the moderating influences of procedural justice perceptions

Workman

2009

Information and Organization

Self Cite

View full text Add to dashboard Cite

Section: Monitoring: the Unblinking Eyementioning

confidence: 99%

A field study of corporate employee monitoring: Attitudes, absenteeism, and the moderating influences of procedural justice perceptions

Workman

2009

Information and Organization

Self Cite

View full text Add to dashboard Cite

“…Researchers and organizations recognize that the employees are the weakest link in the organization [20,21,22]. Since the logs from the laptop thefts were insufficient to provide us with this information, we orchestrated a set of penetration tests where we used social engineering as a means to obtain a laptop.…”

Section: ) Limitation Of the Logsmentioning

confidence: 99%

Effectiveness of Physical, Social and Digital Mechanisms against Laptop Theft in Open Organizations

Dimkov

Pieters

Hartel

2010

2010 IEEE/ACM Int'l Conference on Green Computing and Communications &Amp; Int'l Conference on Cyber, Physical and Social Compu

View full text Add to dashboard Cite

Abstract-Organizations rely on physical, digital and social mechanisms to protect their IT systems. Of all IT systems, laptops are probably the most troublesome to protect, since they are easy to remove and conceal. When the thief has physical possession of the laptop, it is also difficult to protect the data inside. In this study, we look at the effectiveness of the security mechanisms against laptop theft in two universities. The study considers the physical and social protection of the laptops. We analyze the logs from laptop thefts in both universities and complement the results with penetration tests. The results from the study show that the effectiveness of security mechanisms from the physical domain is limited, and it depends mostly from the social domain. The study serves as a motivation to further investigate the analysis of the alignment of the mechanisms across all three security domains to protect the IT assets in an organization.

show abstract

“…Moreover, risk management techniques, risk, uncertainty, and mistakes can potentially be acknowledged and immediately be dealt with rather than ignore it and hid. Workman (2007), demonstrated that there are many threats to the integrity, confidentiality, and availability of information maintained by organizational systems. Key issues related to internal threats have for information security: nature and honesty in corporate and cultural factors, social and economic changes considered and stating that the security risk for legal access to facilities, information, knowledge organization and location of assets, should be considered to reduce the threats, therefor methods of -965-Journal of Industrial Engineering and Management -http://dx.doi.org/10.3926/jiem.2032 prevention are better from methods of reactive.…”

Section: Introduction and Literature Reviewmentioning

confidence: 99%

Information security risk management and incompatible parts of organization

Talabeigi¹,

Naeeini²

2016

JIEM

View full text Add to dashboard Cite

Abstract:Purpose: we prepared a questionnaire to evaluate Incompatible parts and also risk management in University of Science and Technology E-Learning Center and studying the Incompatible parts impacts on utility of organization.Design/methodology/approach: By using coalitional game theory we present a new model to recognize the degrees of incompatibility among independent divisions of an organization with dependent security assets. Based on positive and negative interdependencies in the parts, the model provides how the organization can decrease the security risks through non-cooperation rather than cooperation. we implement the proposed model of this paper by analyzing the data which have been provided by questionnaires from different three managers' ideas of Iran University of Science and Technology E-Learning Center located in Iran University of Science and Technology, Tehran, Iran. Findings:In general, by collecting data and analyzing them, the survey showed that Incompatible parts of organizations have negative impacts on utility of organization risk management process.Furthermore, it adds values to other organizations and provides the best practices in planning, developing, implementing and monitoring risk management in organizations.-964-Journal of Industrial Engineering and Management -http://dx.doi.org/10.3926/jiem.2032Research limitations/implications: Since Information security and also Risk Management are still areas which need to improve in some Iranian universities, we couldn't consider them in our analysis. On the other hand, due to questionnaire limitation, the study's sample size is 1. This size may be considered large for our statistical analysis. Originality/value:The main contribution of this paper is to propose a model for noncooperation among a number of divisions in an organization and using risk management factors.

show abstract

Gaining Access with Social Engineering: An Empirical Study of the Threat

Cited by 111 publications

References 77 publications

A field study of corporate employee monitoring: Attitudes, absenteeism, and the moderating influences of procedural justice perceptions

A field study of corporate employee monitoring: Attitudes, absenteeism, and the moderating influences of procedural justice perceptions

Effectiveness of Physical, Social and Digital Mechanisms against Laptop Theft in Open Organizations

Information security risk management and incompatible parts of organization

Contact Info

Product

Resources

About