Assessment Of Social Engineering Attack Traces In Information Systems

The article examines social engineering attacks in information systems and issues related to detecting and assessing their traces. Using social-graph models, the interactions between users and the propagation paths of attacks are analyzed. Alongside the probability of attack success, the expected level of damage to the organization is also taken into account. The proposed approach enables a more realistic assessment of information security and facilitates effective planning of preventive measures.