Social engineering interaction method and device and storage medium

Abstract

The invention provides a social engineering interaction method and device, and a storage medium. The method comprises the following steps: monitoring and recording a session message between a networkuser and a monitoring end user from a social platform; identifying an identity authentication state of the session based on the monitored session message; identifying a scene counterfeiting state of the session based on the monitored session message and preset counterfeiting scene data; identifying an attack implementation state of the session based on the monitored session message and preset sensitive operation data; under the condition that the scene counterfeiting state is identified and the attack implementation state is identified, performing attack processing by adopting a sandbox mechanism; and under the condition that the attack implementation state is not identified after the scene counterfeiting state is identified, sending an attack induction response message to a network user by utilizing a pre-established attack induction mechanism based on the counterfeiting scene in the identified scene counterfeiting state, so as to interact with the network user until the session is ended or the attack implementation state is identified.

Description

technical field [0001] The present invention relates to the fields of computer technology, network space security and social engineering, and more specifically relates to a social engineering interaction method, device and storage medium. Background technique [0002] At present, research on social engineering mainly focuses on attack model understanding, personality vulnerability analysis, attack detection, defense, etc. Although many attack models have been proposed, they are theoretically the extension and improvement of Kevin Mitnick's attack model. For example, the existing literature divides a social engineering attack into 8 stages: 1) collect information; 2) Determining strategy; 3) Using psychological factors; 4) Approaching the victim; 5) Role-playing; 6) Trust building; 7) Waiting for an opportunity; sex. [0003] Nowadays, there are endless researches on the detection of social engineering attacks, starting from two aspects of people and technology, mainly divi...

AI Technical Summary

Problems solved by technology

However, the current attack detection method has a single application and poor flexibility. For example, in terms of detection methods for phishing emails and phishing websites, two different detection methods are required, and there is a lack of detection of social engineering attacks in the form of direct dialogue, so it cannot meet the requirements for Detection of complex, intersecting social engineering attacks such as conversational

Images