social engineering defense architecture - purdue university

Social Engineering Defense Architecture Abstract This project proposes a theoretical solution to the problem of Social Engineering (SE) attacks perpetrated over the phone lines. As a byproduct real time attack signatures are generated, which can be used in a cyber forensic analysis of such attacks. Current methods of SE attack detection and prevention rely on policy and personnel training, which fails because the root of the problem, people, are still involved. The proposed solution relies on computer systems to analyze phone conversations in real time and determine if the caller is deceiving the receiver. This Social Engineering Defense Architecture (SEDA) is completely theoretical as the technologies employed are only in the proof of concept phase, but they are all proven to be tractable problems. Michael D. Hoeschele & Marcus K. Rogers Future Research Handling internal calls •The proposed solution treats all calls equally regardless of the location of the caller. •Streamlining of internal calls could decrease amount of processing power. Response to detected attacks •Attack response guidelines need to be formulated help create countermeasures. SE forensics •Forensics tools need to be created to parse SEDA log files and find clues. •Policy on how to conduct a SE cyber forensic investigation using the logs needs to be created. •All current research on cyber forensics has to be done in Social Engineering forensics. SEDA Decision Tree Diagram Attack Detection Diagram D04-6B4 TSHI Michael Hoeschele <[email protected]> 1/1

Upload: others

Post on 21-Oct-2021

5 views

Category:

Documents

0 download

Report

Download

Embed Size (px):

TRANSCRIPT

Social Engineering Defense Architecture

AbstractThis project proposes a theoretical solution to the problem of Social Engineering (SE) attacks perpetrated over the phone lines. As a byproduct real time attack signatures are generated, which can be used in a cyber forensic analysis of such attacks. Current methods of SE attack detection and prevention rely on policy and personnel training, which fails because the root of the problem, people, are still involved. The proposed solution relies on computer systems to analyze phone conversations in real time and determine if the caller is deceiving the receiver. This Social Engineering Defense Architecture (SEDA) is completely theoretical as the technologies employed are only in the proof of concept phase, but they are all proven to be tractable problems.

Michael D. Hoeschele & Marcus K. Rogers

Future ResearchHandling internal calls•The proposed solution treats all calls equally regardless of the location of the caller. •Streamlining of internal calls could decrease amount of processing power.Response to detected attacks•Attack response guidelines need to be formulated help create countermeasures. SE forensics•Forensics tools need to be created to parse SEDA log files and find clues. •Policy on how to conduct a SE cyber forensic investigation using the logs needs to be created. •All current research on cyber forensics has to be done in Social Engineering forensics.

SEDA Decision Tree Diagram

Attack Detection Diagram

D04-6B4 TSHI Michael Hoeschele <[email protected]> 1/1

i-GSDI Consortium - Purdue University iGSDI Commercial.pdfIn December 2016, Purdue University held the Global Security and Defense Symposium that established the Institute for Global

CloudIDEA: A Malware Defense Architecture for Cloud … · CloudIDEA: A Malware Defense Architecture for ... Cloud computing has become a dominant computing paradigm over the past

Jay Melosh Purdue University Planetary Defense Workshop, 8 July 2015 Near-Field Damage from Impacts and Airbursts

Department of Defense Defense Information Enterprise ... Information Enterprise Archite… · Defense Information Enterprise Architecture 1.0 1 Introduction The Defense Information

Department of Defense Joint Technical Architecture User ... resources/jta user guide.pdf · Department of Defense Joint Technical Architecture User Guide and Component JTA Management

Development of a Transport Network Architecture … of Defense Architecture Framework ... documenting, communicating, ... Development of a Transport Network Architecture Model

ChApter Xii: THE ROLE OF ARCHITECTURE IN INTERNET DEFENSE

Supramolecular Architecture - Open Access LMU · Supramolecular Architecture Tailoring Structure and Function of Extended Assemblies Thomas Bein Department of Chemistry, Purdue University,

BloxOneTM Threat Defense Architecture Guide...Infoblox BloxOne Threat Defense Architecture Guide 4 TIDE is backed by the Infoblox Cyber intelligence Unit (CIU) that normalizes and