Automated Phishing Document Generation Using Hierarchical Property Matching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The creation of highly personalized phishing documents for simulated phishing attacks is labor-intensive and requires manual research and adaptation, as existing methods rely heavily on manual compilation and processing of personal data from social networks to deceive targets effectively.
Innovation Solution
An automated method using a hierarchically organized properties database to assign relevance values to personal properties, allowing for the creation of personalized phishing documents by verifying correspondence properties and selecting appropriate preparation properties to tailor the content based on predefined relevance values and a template document.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual personal research and adaptation is performed to create highly personalized phishing documents, then the quality and realism of the phishing document is improved, but the time and labor required for creation increases significantly
Solution Approach 1:
The patent replaces manual personal research and adaptation processes with an automated computer-based system. The system automatically retrieves personal data from social networks, processes it through a hierarchical property database, and generates personalized phishing documents without requiring manual intervention for each individual customization, thus resolving the contradiction between document quality and creation time
Solution Approach 2:
The system enables self-service automation where the computer system independently performs the entire phishing document creation process. It automatically queries social networks for personal data, matches data to hierarchical properties, selects appropriate template sections, and generates the final document without human intervention, allowing the system to serve itself in the document generation task
2Measurement precision
If manual compilation and processing of personal data is performed, then the accuracy of personalization is improved, but the complexity and labor intensity of the process increases
Solution Approach 1:
The patent segments the personal data processing into a hierarchical structure where properties are organized in levels (e.g., general category, specific category, individual attribute). This segmentation allows the system to process and match personal data systematically through predefined hierarchical levels, improving accuracy while managing complexity through structured organization rather than monolithic processing
Solution Approach 2:
The system changes the parameter of data processing from manual compilation to automated computer processing. By transforming the processing method from human-based to machine-based, the system achieves higher accuracy in personalization while reducing the perceived complexity through automation of the entire workflow
3Productivity
If automated personalization is implemented, then the productivity of phishing document creation is improved, but the complexity of the automated system increases
Solution Approach 1:
The patent implements preliminary action by pre-organizing personal properties into a hierarchical database structure before document generation. The hierarchical property database is prepared in advance with predefined categories and levels, allowing the automated system to quickly retrieve and match personal data without complex real-time processing, thus improving productivity while managing system complexity through pre-processing
Solution Approach 2:
The hierarchical property database serves as an intermediary between the raw personal data from social networks and the final phishing document templates. This intermediary structure simplifies the automated processing by providing a standardized layer for data matching and selection, enabling high-speed document generation without requiring the system to directly handle complex data transformation logic
Data Source
AI summary
An automated creation of a phishing document uses personal data of a person stored in a database of persons and anonymous and categorisable personal properties stored in a hierarchical properties database. A relevance value is assigned to each personal property. At least one property of the person contained in the personal data has a correspondence in the properties database, that is a correspondence property. It is verified whether one of the correspondence properties is hierarchically subordinate to a phishing-document-specific default personal property. This subordinate correspondence property forms a creation property. The phishing document is created based on the creation property if this requirement is met. It is verified whether the relevance value of the creation property corresponds to a predefined target relevance value. The creation property is selected as a preparation property and used to prepare the phishing document if the assigned relevance value corresponds to the target relevance value.