Contributions

Submission Date
Jan 2022
Type

Abstract

Exposure, disclosure, data breaches, leaks, social media, and a myriad of open-source data serve to provide access to personal information that can be used to craft, target, and execute various social engineering attacks on unsuspecting individuals.
Submission Date
Oct 2021
Publication Date
Dec 2021

Abstract

The results of this research study established, categorized, and validated a quantifiable measurement of personal information. Moreover, the results of this research study validated that the SEXI benchmarking index could be used to assess an individual’s exposure to social engineering due to publicly available personal information. As organizations and public figures rely on Internet technologies understanding the level of personal information exposure is critical is protecting against social engineering attacks. Furthermore, assessing personal information exposure could provide an organization insight into exposed personal information facilitating further mitigation of threats or potential social engineering attack vectors. Discussions and implications for future research are provided.
Publication Date
Feb 2019

Abstract

For the Embry-Riddle Aeronautical University Engineer’s Week (February 2019), the IEEE Daytona Section hosted a presentation concerning the intersection of social engineering and personal information. A presentation of the difficulty associated with the classification and regulation of personal information, the methods used by social engineers to interfere with academia and research, as well as the process used by attackers on a key individual in the United States government.
Publication Date
Oct 2017

Abstract

This work-in-progress study will include a mixed methods approach combining an expert panel using the Delphi method, developmental research, and a quantitative data collection. The expert panel will provide a weighted evaluation instrument, subsequently used to develop an algorithm that will form the basis for a Social Engineering eXposure Index (SEXI) using publicly available personal information found on the Internet on these executives, which will help quantify the exposure of each executive. The collected data will be quantitatively evaluated, analyzed, and presented.