社工概念演化分析

王作广; 朱红松; 孙利民

引用本文：

王作广,朱红松,孙利民.社工概念演化分析[J].信息安全学报,2021,6(2):12-29 [点击复制]
WANG Zuoguang,ZHU Hongsong,SUN Limin.The Concept Evolution Analysis of Social Engineering[J].Journal of Cyber Security,2021,6(2):12-29 [点击复制]

本文已被：浏览 7684次下载 6000次	码上扫一扫！
社工概念演化分析
王作广^1,2, 朱红松^1,2, 孙利民^1,2
0 字体:加大+\|默认\|缩小-
(1.中国科学院大学网络空间安全学院北京中国 100049;2.中国科学院信息工程研究所物联网信息安全技术北京市重点实验室北京中国 100093)

摘要:

社工是黑客社区一种非常流行的攻击方法，对网络空间安全造成了严重的危害。然而，社工的概念定义作为理解社工威胁、开展社工研究的基础，却并不一致、明晰，而且随着概念的演化逐渐显现模糊、泛化、消解的趋势，影响社工安全研究与防护工作的开展。本文对社工概念演化进行了体系化的研究，同时也分析了社工攻击威胁的特性及态势，梳理了社工实现方式/技术的发展和趋势，总结了社工概念定义存在的问题及面临的挑战，并对社工概念重新定义问题进行了讨论，以期为社工安全研究提供参考、促进社工安全防护研究。

关键词: 社会工程学社交工程社工概念演化定义安全威胁攻击防护

DOI：10.19363/J.cnki.cn10-1380/tn.2021.03.02

投稿时间：2019-03-19

基金项目:本课题得到国家重点研发计划（No.2017YFB0802804）；自然基金青年项目（No.61702503）资助。

The Concept Evolution Analysis of Social Engineering

WANG Zuoguang^1,2, ZHU Hongsong^1,2, SUN Limin^1,2

(1.School of Cyber Security, University of Chinese Academy of Sciences, Beijing 100049, China;2.Beijing Key Laboratory of IoT Information Security Technology, Institute of Information Engineering, Chinese Academy of Sciences, Beijing 100093, Chinas)

Abstract:

Social engineering is a very popular attack in the hacker community, and has brought severe damage to cyber security. However, the concept of social engineering is not consistent and clear, despite its fundamental role in social engineering research. Furthermore, there is a tendency to be obscure, overgeneralize and decompose in the concept evolution of the social engineering. These phenomena impede the security research and defense on social engineering. This paper studies the concept evolution of social engineering, and analyzes the problems and challenges faced by the concept. It ends with a discussion on the concept redefinition, to promote the future research on social engineering.

Key words: social engineering concept evolution definition security threat attack defense