Social engineering interaction method, device and storage medium

Abstract

The present invention provides a social engineering interaction method, device and storage medium, the method comprising the following steps: monitoring and recording conversation messages between network users and monitoring end users from a social platform; identifying session identity authentication based on the monitored conversation messages state; identify the scene forgery status of the session based on the monitored session message and preset forged scene data; identify the attack implementation status of the session based on the monitored session message and preset sensitive operation data; when the scene forgery status is identified When the attack implementation status is identified later, the attack processing is carried out using the sandbox mechanism; if the attack implementation status is not recognized after the scene forgery status is identified, the forged scene in the identified scene forgery status uses the pre-established The attack induction mechanism of the network user sends an attack induction response message to interact with the network user until the session ends or the attack implementation status is identified.

Description

technical field [0001] The present invention relates to the fields of computer technology, network space security and social engineering, and more specifically relates to a social engineering interaction method, device and storage medium. Background technique [0002] At present, research on social engineering mainly focuses on attack model understanding, personality vulnerability analysis, attack detection, defense, etc. Although many attack models have been proposed, they are theoretically the extension and improvement of Kevin Mitnick's attack model. For example, the existing literature divides a social engineering attack into 8 stages: 1) collect information; 2) Determining strategy; 3) Using psychological factors; 4) Approaching the victim; 5) Role-playing; 6) Trust building; 7) Waiting for an opportunity; sex. [0003] Nowadays, there are endless researches on the detection of social engineering attacks, starting from two aspects of people and technology, mainly divi...

AI Technical Summary

Problems solved by technology

However, the current attack detection method has a single application and poor flexibility. For example, in terms of detection methods for phishing emails and phishing websites, two different detection methods are required, and there is a lack of detection of social engineering attacks in the form of direct dialogue, so it cannot meet the requirements for Detection of complex, intersecting social engineering attacks such as conversational

Images