Abstract:Social engineering attacks are considered one of the most hazardous cyberattacks in cybersecurity, as human vulnerabilities are often the weakest link in the entire network. Such vulnerabilities are becoming increasingly susceptible to network security risks. Addressing the social engineering attack defense problem has been the focus of many studies. However, two main challenges hinder its successful resolution. Firstly, the vulnerabilities in social engineering attacks are unique due to multistage attacks, leading to incorrect social engineering defense strategies. Secondly, social engineering attacks are real-time, and the defense strategy algorithms based on gaming or reinforcement learning are too complex to make rapid decisions. This paper proposes a multiattribute quantitative incentive method based on human vulnerability and an improved Q-learning (IQL) reinforcement learning method on human vulnerability attributes. The proposed algorithm aims to address the two main challenges in social engineering attack defense by using a multiattribute incentive method based on human vulnerability to determine the optimal defense strategy. Furthermore, the IQL reinforcement learning method facilitates rapid decision-making during real-time attacks. The experimental results demonstrate that the proposed algorithm outperforms the traditional Q-learning (QL) and deep Q-network (DQN) approaches in terms of time efficiency, taking 9.1% and 19.4% less time, respectively. Moreover, the proposed algorithm effectively addresses the non-uniformity of vulnerabilities in social engineering attacks and provides a reliable defense strategy based on human vulnerability attributes. This study contributes to advancing social engineering attack defense by introducing an effective and efficient method for addressing the vulnerabilities of human factors in the cybersecurity domain.

Strategies for Counteracting Social Engineering Attacks

Counteracting Social Engineering Attacks

Understanding Social Engineers Strategies from the perspective of Sun-Tzu Philosophy

Contemplating social engineering studies and attack scenarios: A review study.

Understanding and Deciphering of Social Engineering Attack Scenarios.

How Effective Are the Prevailing Attack-Defense Models for Cybersecurity Anyway?

Countering Social Engineering through Social Media: An Enterprise Security Perspective

Internet-based Social Engineering Attacks, Defenses and Psychology: A Survey

A Comprehensive Taxonomy of Social Engineering Attacks and Defense Mechanisms: Toward Effective Mitigation Strategies

Internet-Based Social Engineering Psychology, Attacks, and Defenses: A Survey

Social Engineering Attack-Defense Strategies Based on Reinforcement Learning

Fringing Electric Field Sensors for Anti-Attack at System-Level Protection

SEAtech: Deception Techniques in Social Engineering Attacks: An Analysis of Emerging Trends and Countermeasures

Social engineering: Concepts, Techniques and Security Countermeasures

Case Study On Social Engineering Techniques for Persuasion

How Cyber Criminal Use Social Engineering To Target Organizations

Social Engineering Attacks and Defenses in the Physical World vs. Cyberspace: A Contrast Study

The Shadow of Fraud: The Emerging Danger of AI-powered Social Engineering and its Possible Cure

Attacking Strategies and Temporal Analysis Involving Facebook Discussion Groups

Discover and Automate New Adversarial Attack Paths to Reduce Threat Risks for The Security of Organizations

Phishing and Spear Phishing: examples in Cyber Espionage and techniques to protect against them