The role of social psychological principles of influence in social engineering techniques

This paper aims to explore the psychological principles of influence that underlie Social Engineering (SE) techniques in cybersecurity scams and frauds. SE techniques, namely phishing, baiting, tailgating, shoulder surfing, dumpster diving, waterholing, and Reverse Social Engineering (RSE), as well...

Full description

Bibliographic Details
Main Authors: Ong, Yu Qing, Yap, Hui Pei
Other Authors: Wan Ching
Format: Final Year Project (FYP)
Language:English
Published: 2015
Subjects:
Online Access:http://hdl.handle.net/10356/65707
_version_ 1811696739601612800
author Ong, Yu Qing
Yap, Hui Pei
author2 Wan Ching
author_facet Wan Ching
Ong, Yu Qing
Yap, Hui Pei
author_sort Ong, Yu Qing
collection NTU
description This paper aims to explore the psychological principles of influence that underlie Social Engineering (SE) techniques in cybersecurity scams and frauds. SE techniques, namely phishing, baiting, tailgating, shoulder surfing, dumpster diving, waterholing, and Reverse Social Engineering (RSE), as well as social psychology influence principles, namely reciprocity, scarcity, authority, liking, commitment and consistency, and social proof, are described. When influence principles were analysed and mapped against SE techniques, results showed that the use of authority was most frequently adopted. This could be because different types of use of authority mechanisms provide avenues for harnessing authority and influence principles. Moreover, several obedience factors were found to be associated with influence principles, which may lay the foundation for authority. Commitment and consistency was the next most frequently employed influence principle, and this may be because it draws on the theory of cognitive dissonance which is the central mechanism of decision-making and persuasion. Internal and external sources of pressure, as well as the potential costs incurred by individuals and the institutional or organisational bodies they may represent, enhance the effectiveness of commitment and consistency. On the other hand, the prospect of long-term investment of time and effort may temper its adoption relative to authority. Of all the SE techniques reviewed, shoulder surfing was not found to be associated with any influence principle. In essence, the use of influence tactics in SE is akin to old wine in a new bottle: deploying age-old influence principles to manipulate people under the guise of new mediums.
first_indexed 2024-10-01T07:44:09Z
format Final Year Project (FYP)
id ntu-10356/65707
institution Nanyang Technological University
language English
last_indexed 2024-10-01T07:44:09Z
publishDate 2015
record_format dspace
spelling ntu-10356/657072019-12-10T14:07:31Z The role of social psychological principles of influence in social engineering techniques Ong, Yu Qing Yap, Hui Pei Wan Ching Majeed Khader School of Humanities and Social Sciences DRNTU::Social sciences::Psychology This paper aims to explore the psychological principles of influence that underlie Social Engineering (SE) techniques in cybersecurity scams and frauds. SE techniques, namely phishing, baiting, tailgating, shoulder surfing, dumpster diving, waterholing, and Reverse Social Engineering (RSE), as well as social psychology influence principles, namely reciprocity, scarcity, authority, liking, commitment and consistency, and social proof, are described. When influence principles were analysed and mapped against SE techniques, results showed that the use of authority was most frequently adopted. This could be because different types of use of authority mechanisms provide avenues for harnessing authority and influence principles. Moreover, several obedience factors were found to be associated with influence principles, which may lay the foundation for authority. Commitment and consistency was the next most frequently employed influence principle, and this may be because it draws on the theory of cognitive dissonance which is the central mechanism of decision-making and persuasion. Internal and external sources of pressure, as well as the potential costs incurred by individuals and the institutional or organisational bodies they may represent, enhance the effectiveness of commitment and consistency. On the other hand, the prospect of long-term investment of time and effort may temper its adoption relative to authority. Of all the SE techniques reviewed, shoulder surfing was not found to be associated with any influence principle. In essence, the use of influence tactics in SE is akin to old wine in a new bottle: deploying age-old influence principles to manipulate people under the guise of new mediums. Bachelor of Arts 2015-12-10T03:52:34Z 2015-12-10T03:52:34Z 2015 2015 Final Year Project (FYP) http://hdl.handle.net/10356/65707 en Nanyang Technological University 60 p. application/pdf
spellingShingle DRNTU::Social sciences::Psychology
Ong, Yu Qing
Yap, Hui Pei
The role of social psychological principles of influence in social engineering techniques
title The role of social psychological principles of influence in social engineering techniques
title_full The role of social psychological principles of influence in social engineering techniques
title_fullStr The role of social psychological principles of influence in social engineering techniques
title_full_unstemmed The role of social psychological principles of influence in social engineering techniques
title_short The role of social psychological principles of influence in social engineering techniques
title_sort role of social psychological principles of influence in social engineering techniques
topic DRNTU::Social sciences::Psychology
url http://hdl.handle.net/10356/65707
work_keys_str_mv AT ongyuqing theroleofsocialpsychologicalprinciplesofinfluenceinsocialengineeringtechniques
AT yaphuipei theroleofsocialpsychologicalprinciplesofinfluenceinsocialengineeringtechniques
AT ongyuqing roleofsocialpsychologicalprinciplesofinfluenceinsocialengineeringtechniques
AT yaphuipei roleofsocialpsychologicalprinciplesofinfluenceinsocialengineeringtechniques