An empirical study on the susceptibility to social engineering in social networking sites: the case of Facebook. Issue 6 (1st November 2017)

• Record Type: Journal Article
• Authors: Algarni, Abdullah; Xu, Yue; Chan, Taizan
• Is Part Of: European journal of information systems. Volume 26:Issue 6(2017)
• Page Start: 661
• Page End: 687
• Publication Date: 2017-11-01
• Subjects: social engineering -- deception -- impersonation -- source credibility -- phishing -- Facebook; Information technology -- Periodicals; Information technology -- Europe -- Periodicals; Management information systems -- Periodicals; Management information systems -- Europe -- Periodicals; 658.403805
• DOI: 10.1057/s41303-017-0057-y
• Languages: English
• ISSNs: 0960-085X

Abstract

Abstract: Research suggests that social engineering attacks pose a significant security risk, with social networking sites (SNSs) being the most common source of these attacks. Recent studies showed that social engineers could succeed even among those organizations that identify themselves as being aware of social engineering techniques. Although organizations recognize the serious risks of social engineering, there is little understanding and control of such threats. This may be partly due to the complexity of human behaviors in failing to recognize attackers in SNSs. Due to the vital role that impersonation plays in influencing users to fall victim to social engineering deception, this paper aims to investigate the impact of source characteristics on users' susceptibility to social engineering victimization on Facebook. In doing so, we identify source credibility dimensions in terms of social engineering on Facebook, Facebook-based source characteristics that influence users to judge an attacker as per these dimensions, and mediation effects that these dimensions play between Facebook-based source characteristics and susceptibility to social engineering victimization.