Assessing the Factors of a Social Engineering eXposure Index (SEXI) using Open-Source Personal Information
Exposure, disclosure, data breaches, leaks, social media, and a myriad of open-source data serve to provide access to personal information that can be used to craft, target, and execute various social engineering attacks on unsuspecting individuals.
The results of this research study established, categorized, and validated a quantifiable measurement of personal information. Moreover, the results of this research study validated that the SEXI benchmarking index could be used to assess an individual’s exposure to social engineering due to publicly available personal information. As organizations and public figures rely on Internet technologies understanding the level of personal information exposure is critical is protecting against social engineering attacks. Furthermore, assessing personal information exposure could provide an organization insight into exposed personal information facilitating further mitigation of threats or potential social engineering attack vectors. Discussions and implications for future research are provided.