Social engineering attack defense method and device

An engineering and social technology, applied in the field of defense against social engineering attacks, can solve problems such as failure to meet user security protection needs, single protection mechanism, limitations, etc., and achieve the effect of meeting security protection needs

CN110290155AActive Publication Date: 2019-09-27BEIJING UNIV OF POSTS & TELECOMM
9 Cites 5 Cited by

Patent Information

Authority / Receiving Office
CN · China
Current Assignee / Owner
Publication Date
2019-09-27

Smart Images

  • Figure 1
    Figure 1
  • Figure 2
    Figure 2
  • Figure 3
    Figure 3
Patent Text Reader

Abstract

The invention provides a social engineering attack defense method and device, and the method comprises the steps: obtaining the content of a communication message when a user terminal receives the communication message; extracting subject cognitive characteristic characteristics in the acquired content of the communication message; judging whether the communication message is a social engineering attack or not according to the extracted subject cognitive characteristic characteristics; under the condition that the communication message is a social engineering attack, selecting a defense measure according to the pre-evaluated user security awareness level of the user terminal; and executing a defense action on the communication message according to the selected defense measure. According to the scheme, adaptive safety protection is provided for the user, and all-around safety protection requirements of the user are met.
Need to check novelty before this filing date? Find Prior Art

Description

technical field

[0001] The invention relates to the technical field of network security, in particular to a defense method and device for social engineering attacks. Background technique

[0002] Social engineering refers to the use of people's psychological weaknesses (such as human instinct, curiosity, trust, greed) and loopholes in the rules and regulations through natural, social and institutional ways to create a relationship between the attacker and the attacked. Establish a trust relationship between users and obtain valuable information, so that some sensitive data and private data can be accessed through paths that are not authorized by the user. With the popularization of computers and the continuous development of Internet technology, as a means of attack, the technology of social engineering is becoming more and more mature. Using social engineering to conduct network attacks can enable network attackers to achieve what they want without paying a high price, so ...

Examples

Embodiment Construction

[0021] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention more clear, the embodiments of the present invention will be further described in detail below in conjunction with the accompanying drawings. Here, the exemplary embodiments and descriptions of the present invention are used to explain the present invention, but not to limit the present invention.

[0022] A user terminal (for example, a mobile phone, a tablet computer) may have multiple communication platforms, for example, China Mobile, China Unicom, WeChat, email, and the like. Users can communicate with the outside world or other terminals or servers through various communication platforms on the user terminal. For example, you can receive incoming calls or text messages through China Mobile or China Unicom, and you can receive text or voice messages, audio / video call requests, etc. through WeChat. Attackers can conduct social engineering attacks on users of...