Obrana proti sociálnímu inženýrství se zaměřením na phishing

Social engineering is a type of attack on an organization or individual, focusing on the weaknesses of the human factor in security against information leakage. The aim of the work was to explain the concept of social engineering, identify threats, explain the basic elements of an attack using social engineering based on a research of the literature and mention the defense against such an attack. Furthermore, qualitative research has been conducted to identify and analyze the experiences and opinions of individuals on this matter with a focus on phishing. Research has shown that some individuals own multiple personal e-mail accounts and that these accounts are categorized according to how they are used. These accounts are also used according to the service to which individuals connect, depending on the credibility. None of the respondents who have a work email have used this account for personal matters in the past. Only a small number of respondents have been trained in the past against similar attacks and have processes in place against social engineering attacks at work. However, the set of processes do not address the importance of reporting these messages. According to the respondents, the reason why people respond to fraudulent e-mails is the motivation of self-enrichment and satisfaction of curiosity.