Towards an Ontological Model Defining the Social Engineering Domain

摘要: The human is often the weak link in attainment of Information Security due to their susceptibility deception and manipulation. Social Engineering refers exploitation humans order gain unauthorised access sensitive information. Although an important branch Security, discipline not well defined; a number different definitions appear literature. Several concepts domain are defined this paper. This paper also presents ontological model for attack based on analysis existing taxonomies. An ontology enables explicit, formal representation entities inter-relationships within domain. aim both contribute towards commonly accepted definitions, develop representative attack. In summary, provides concrete Engineering, social engineer.