Publicity of the organisation as a vulnerability factor in a social engineering attack

Abstract

The article is devoted to the study of publicity of an organization, its wide representation in the Internet environment as a factor that increases the risks of implementing a social engineering attack. The research methods are based on the selection of information sources that can be engaged by an attacker at the stage of "information gathering" in the commission of a social engineering attack, and the construction on their basis of a composite assessment indicator. The result of the study is a mathematical formalization of parameters for assessing the sources of information, as well as the construction of a composite score based on them, which in turn can form the basis of new models of analysis of the success of the implementation of a social engineering attack.