论文标题
赞比亚ICT行业的新兴手机社会工程网络攻击
Emerging Mobile Phone-based Social Engineering Cyberattacks in the Zambian ICT Sector
论文作者
论文摘要
2020年，赞比亚的注册SIM卡和主动手机用户的数量超过了该国的人口。这清楚地表明，赞比亚的移动电话不仅使人们沟通的方式变得轻松了，而且由于将手机系统与财务支付系统集成在一起，人们也可以进行财务交易的方式。这种发展并非没有成本。网络攻击者使用各种社会工程技术已经跳到潮流中，欺骗毫无戒心的用户。考虑到上述，本文在赞比亚提出了一种基于手机的社会工程网络攻击（网络钓鱼，smishing和vishing）的高级分析方法，该方法试图欺骗良性受害者。本文提出了一项基线研究，以重申目前的问题。此外，我们设计了一个攻击模型和一个评估框架，并确定最普遍的攻击类型。我们还在结果部分中提出了逻辑回归分析，以结束最普遍的基于手机的社会工程攻击类型。根据工件和观察的见解，我们建议提出建议，以减轻这些新兴的社会工程网络攻击。
The number of registered SIM cards and active mobile phone subscribers in Zambia in 2020 surpassed the population of the country. This clearly shows that mobile phones in Zambia have become part of everyday life easing not only the way people communicate but also the way people perform financial transactions owing to the integration of mobile phone systems with financial payment systems. This development has not come without a cost. Cyberattackers, using various social engineering techniques have jumped onto the bandwagon to defraud unsuspecting users. Considering the aforesaid, this paper presents a high-order analytical approach towards mobile phone-based social engineering cyberattacks (phishing, SMishing, and Vishing) in Zambia which seek to defraud benign victims. This paper presents a baseline study to reiterate the problem at hand. Furthermore, we devise an attack model and an evaluation framework and ascertain the most prevalent types of attack. We also present a logistic regression analysis in the results section to conclude the most prevalent mobile phone-based type of social engineering attack. Based on the artifacts and observed insights, we suggest recommendations to mitigate these emergent social engineering cyberattacks.
