Protection against social engineering attacks: Qualitative analysis of strategies, technologies and specific patterns

Abstract

Social engineering is a technique used by cybercriminals to take advantage of the lack of knowledge about information security on the human side. In this sense, this research explores the strategies, technologies and specific patterns to mitigate cyberattacks, with emphasis on social engineering. For this purpose, a qualitative methodology is used based on interviews with teacher researchers and cybersecurity experts, selected through simple random sampling. The results show that the lack of training in cybersecurity makes users easy targets for attackers, in addition to the absence of appropriate strategies and technologies to mitigate threats. Among the conclusions, it must be highlighted the urgency of implementing security policies, awareness programs and technological tools such as Firewalls, Antivirus, AntiSpam, multifactor authentication and intrusion detection and prevention systems, this in order to strengthen cybersecurity in vulnerable environments.