Social engineering attack defense method and device

Abstract

The invention provides a social engineering attack defense method and device, and the method comprises the steps: obtaining the content of a communication message when a user terminal receives the communication message; extracting subject cognitive characteristic characteristics in the acquired content of the communication message; judging whether the communication message is a social engineering attack or not according to the extracted subject cognitive characteristic characteristics; under the condition that the communication message is a social engineering attack, selecting a defense measure according to the pre-evaluated user security awareness level of the user terminal; and executing a defense action on the communication message according to the selected defense measure. According to the scheme, adaptive safety protection is provided for the user, and all-around safety protection requirements of the user are met.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a defense method and device for social engineering attacks. Background technique [0002] Social engineering refers to the use of people's psychological weaknesses (such as human instinct, curiosity, trust, greed) and loopholes in the rules and regulations through natural, social and institutional ways to create a relationship between the attacker and the attacked. Establish a trust relationship between users and obtain valuable information, so that some sensitive data and private data can be accessed through paths that are not authorized by the user. With the popularization of computers and the continuous development of Internet technology, as a means of attack, the technology of social engineering is becoming more and more mature. Using social engineering to conduct network attacks can enable network attackers to achieve what they want without paying a high price, so ...

AI Technical Summary

Problems solved by technology

The mechanism based on safety education focuses on formulating a series of safety rules to improve personal safety awareness. However, since people are not machines, negligence may occur at any time, and it takes a long time to train to improve, and the improvement effect varies from person to person. different, so this method is not reliable

The detection mechanism based on technical means starts from the social engineering attack, and detects the attack by extracting a series of features, which can achieve high accuracy and speed, but the detection method is single and limited to the specific form of the attack. The defense mechanism for social engineering attacks is relatively simple

Therefore, the existing detection and protection methods cannot meet the comprehensive safety protection needs of users.

Images