A Comprehensive Study of Social Engineering Based Attacks in India to Develop a Conceptual Model

Abstract

The objective of this research is to present and demonstrate an analytical approach towards Social Engineering. A questionnaire was created and a survey was conducted accordingly to determine the understanding of IT practitioners and social networking users based in India. The participants of this survey are either employed with a renowned IT service providing firm or students of top IT colleges. Based on the responses an advanced model of Social Engineering based attacks was developed. The research identified many participating entities in Social Engineering based Attacks and each identified entity of this research is a research area in itself. This model can be used in development of Organization-wide Information Security policy and Information Security Awareness Program.