{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,24]],"date-time":"2026-03-24T15:56:20Z","timestamp":1774367780289,"version":"3.50.1"},"publisher-location":"Cham","reference-count":38,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783030522483","type":"print"},{"value":"9783030522490","type":"electronic"}],"license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020]]},"DOI":"10.1007\/978-3-030-52249-0_35","type":"book-chapter","created":{"date-parts":[[2020,7,3]],"date-time":"2020-07-03T11:03:49Z","timestamp":1593774229000},"page":"521-541","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":6,"title":["Social Engineering Defense Mechanisms: A Taxonomy and a Survey of Employees\u2019 Awareness Level"],"prefix":"10.1007","author":[{"given":"Dalal N.","family":"Alharthi","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Amelia C.","family":"Regan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2020,7,4]]},"reference":[{"issue":"1","key":"35_CR1","doi-asserted-by":"publisher","first-page":"40","DOI":"10.1080\/19393550802623214","volume":"18","author":"SD Applegate","year":"2009","unstructured":"Applegate, S.D.: Social engineering: hacking the wetware!. Inf. Secur. J. Global Perspect. 18(1), 40\u201346 (2009)","journal-title":"Inf. Secur. J. Global Perspect."},{"key":"35_CR2","volume-title":"Social Engineering: The Art of Human Hacking","author":"C Hadnagy","year":"2010","unstructured":"Hadnagy, C.: Social Engineering: The Art of Human Hacking. Wiley, New York (2010)"},{"key":"35_CR3","unstructured":"Berg, A.: Cracking a social engineer. LAN Times (1995)"},{"issue":"2","key":"35_CR4","doi-asserted-by":"publisher","first-page":"8","DOI":"10.1145\/228292.228295","volume":"14","author":"T Greening","year":"1996","unstructured":"Greening, T.: Ask and ye shall receive: a study in \u201csocial engineering\u201d. ACM SIGSAC Rev. 14(2), 8\u201314 (1996)","journal-title":"ACM SIGSAC Rev."},{"key":"35_CR5","unstructured":"Karakasiliotis, A., Furnell, S., Papadaki, M.: Assessing end-user awareness of social engineering and phishing (2006)"},{"issue":"5","key":"35_CR6","doi-asserted-by":"publisher","first-page":"463","DOI":"10.1108\/09685220810920549","volume":"16","author":"M Workman","year":"2008","unstructured":"Workman, M.: A test of interventions for security threats from social engineering. Inf. Manag. Comput. Secur. 16(5), 463\u2013483 (2008)","journal-title":"Inf. Manag. Comput. Secur."},{"key":"35_CR7","doi-asserted-by":"crossref","unstructured":"Orgill, G.L., Romney, G.W., Bailey, M.G., Orgill, P.M.: The urgency for effective user privacy-education to counter social engineering attacks on secure computer systems. In: Proceedings of the 5th Conference on Information Technology Education, pp. 177\u2013181. ACM (2004)","DOI":"10.1145\/1029533.1029577"},{"key":"35_CR8","unstructured":"Bakhshi, T., Papadaki, M., Furnell, S.: A practical assessment of social engineering vulnerabilities. In: HAISA, pp. 12\u201323 (2008)"},{"key":"35_CR9","doi-asserted-by":"crossref","unstructured":"Mouton, F., Malan, M.M., Leenen, L., Venter, H.S.: Social engineering attack framework. In: 2014 Information Security for South Africa, pp. 1\u20139. IEEE (2014)","DOI":"10.1109\/ISSA.2014.6950510"},{"key":"35_CR10","unstructured":"Choi, M., Levy, Y., Hovav, A.: The role of user computer self-efficacy, cybersecurity countermeasures awareness, and cybersecurity skills influence on computer misuse. In: Proceedings of the Pre-international Conference of Information Systems (ICIS) SIGSEC \u2013 Workshop on Information Security and Privacy (WISP) (2013)"},{"key":"35_CR11","unstructured":"Granger, S.: Social engineering fundamentals, Part I: hacker tactics. Security Focus, 18 December 2001 (2001)"},{"key":"35_CR12","first-page":"113","volume":"22","author":"K Krombholz","year":"2015","unstructured":"Krombholz, K., Hobel, H., Huber, M., Weippl, E.: Advanced social engineering attacks. J. Inf. Secur. Appl. 22, 113\u2013122 (2015)","journal-title":"J. Inf. Secur. Appl."},{"issue":"5","key":"35_CR13","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1201\/1086\/43312.9.5.20001112\/31378.10","volume":"9","author":"K Manske","year":"2000","unstructured":"Manske, K.: An introduction to social engineering. Inf. Syst. Secur. 9(5), 1\u20137 (2000)","journal-title":"Inf. Syst. Secur."},{"key":"35_CR14","doi-asserted-by":"crossref","unstructured":"Aldawood, H., Skinner, G.: An academic review of current industrial and commercial cyber security social engineering solutions. In: Proceedings of the 3rd International Conference on Cryptography, Security and Privacy, pp. 110\u2013115. ACM (2019)","DOI":"10.1145\/3309074.3309083"},{"key":"35_CR15","doi-asserted-by":"crossref","unstructured":"Alharthi, D.N., Hammad, M.M., Regan, A.C.: A taxonomy of social engineering defense mechanisms. In: Arai, K., Kapoor, S., Bhatia, R. (eds.) Advances in Information and Communication (FICC 2020). Advances in Intelligent Systems and Computing, vol. 1130. Springer, Cham (2020)","DOI":"10.1007\/978-3-030-39442-4_3"},{"key":"35_CR16","doi-asserted-by":"crossref","unstructured":"Thomas, K., Li, F., Zand, A., Barrett, J., Ranieri, J., Invernizzi, L., Markov, Y., Comanescu, O., Eranti, V., Moscicki, A., et\u00a0al.: Data breaches, phishing, or malware?: Understanding the risks of stolen credentials. In: Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security, pp. 1421\u20131434. ACM (2017)","DOI":"10.1145\/3133956.3134067"},{"key":"35_CR17","unstructured":"Shane, S., Schmidt, M.S.: Hillary Clinton emails take long path to controversy. The New York Times (2015)"},{"key":"35_CR18","first-page":"1","volume":"10","author":"AJ Aviv","year":"2010","unstructured":"Aviv, A.J., Gibson, K.L., Mossop, E., Blaze, M., Smith, J.M.: Smudge attacks on smartphone touch screens. Woot 10, 1\u20137 (2010)","journal-title":"Woot"},{"key":"35_CR19","unstructured":"Thapar, A.: Social engineering: an attack vector most intricate to tackle. Infosec Writers, CISSP (2007)"},{"key":"35_CR20","doi-asserted-by":"crossref","unstructured":"Verizon 2018. \n2018 data breach investigations report\n\n (2018). \nhttps:\/\/www.documentwereld.nl\/files\/2018\/Verizon-DBIR_2018-Main_report.pdf","DOI":"10.1016\/S1361-3723(18)30040-X"},{"key":"35_CR21","unstructured":"Elnaim, B.M.E., Al-Lami, H.A.S.W.: The current state of phishing attacks against Saudi Arabia University students (2017)"},{"key":"35_CR22","doi-asserted-by":"publisher","first-page":"372","DOI":"10.1016\/j.chb.2016.03.026","volume":"61","author":"C Happ","year":"2016","unstructured":"Happ, C., Melzer, A., Steffgen, G.: Trick with treat-reciprocity increases the willingness to communicate personal data. Comput. Hum. Behav. 61, 372\u2013377 (2016)","journal-title":"Comput. Hum. Behav."},{"issue":"3","key":"35_CR23","doi-asserted-by":"publisher","first-page":"71","DOI":"10.4018\/jisp.2008070106","volume":"2","author":"BD Medlin","year":"2008","unstructured":"Medlin, B.D., Cazier, J.A., Foulk, D.P.: Analyzing the vulnerability of U.S. hospitals to social engineering attacks: how many of your employees would share their password? Int. J. Inf. Secur. Priv. (IJISP) 2(3), 71\u201383 (2008)","journal-title":"Int. J. Inf. Secur. Priv. (IJISP)"},{"key":"35_CR24","doi-asserted-by":"crossref","unstructured":"Ghafir, I., Prenosil, V., Alhejailan, A., Hammoudeh, M.: Social engineering attack strategies and defence approaches. In: 2016 IEEE 4th International Conference on Future Internet of Things and Cloud (FiCloud), pp. 145\u2013149. IEEE (2016)","DOI":"10.1109\/FiCloud.2016.28"},{"issue":"2","key":"35_CR25","first-page":"45","volume":"1","author":"A Chitrey","year":"2012","unstructured":"Chitrey, A., Singh, D., Singh, V.: A comprehensive study of social engineering based attacks in India to develop a conceptual model. Int. J. Inf. Netw. Secur. 1(2), 45 (2012)","journal-title":"Int. J. Inf. Netw. Secur."},{"key":"35_CR26","doi-asserted-by":"publisher","first-page":"14","DOI":"10.1016\/j.cose.2016.09.009","volume":"65","author":"H Siadati","year":"2017","unstructured":"Siadati, H., Nguyen, T., Gupta, P., Jakobsson, M., Memon, N.: Mind your SMSes: mitigating social engineering in second factor authentication. Comput. Secur. 65, 14\u201328 (2017)","journal-title":"Comput. Secur."},{"key":"35_CR27","unstructured":"Gupta, M., Sharman, R.: Social network theoretic framework for organizational social engineering susceptibility index. In: AMCIS 2006 Proceedings, p. 408 (2006)"},{"key":"35_CR28","doi-asserted-by":"publisher","first-page":"40","DOI":"10.1016\/j.cose.2017.01.004","volume":"66","author":"K Parsons","year":"2017","unstructured":"Parsons, K., Calic, D., Pattinson, M., Butavicius, M., McCormac, A., Zwaans, T.: The human aspects of information security questionnaire (HAIS-Q): two further validation studies. Comput. Secur. 66, 40\u201351 (2017)","journal-title":"Comput. Secur."},{"key":"35_CR29","unstructured":"Beuran, R., Chinen, K.-i., Tan, Y., Shinoda, Y.: Towards effective cybersecurity education and training (2016)"},{"issue":"2","key":"35_CR30","doi-asserted-by":"publisher","first-page":"154","DOI":"10.1016\/j.dss.2009.02.005","volume":"47","author":"T Herath","year":"2009","unstructured":"Herath, T., Rao, H.R.: Encouraging information security behaviors in organizations: role of penalties, pressures and perceived effectiveness. Decis. Support Syst. 47(2), 154\u2013165 (2009)","journal-title":"Decis. Support Syst."},{"issue":"4","key":"35_CR31","doi-asserted-by":"publisher","first-page":"442","DOI":"10.1016\/0022-1031(68)90069-3","volume":"4","author":"JA Stoner","year":"1968","unstructured":"Stoner, J.A.: Risky and cautious shifts in group decisions: the influence of widely held values. J. Exp. Soc. Psychol. 4(4), 442\u2013459 (1968)","journal-title":"J. Exp. Soc. Psychol."},{"key":"35_CR32","doi-asserted-by":"crossref","unstructured":"Okoli, C., Schabram, K.: A guide to conducting a systematic literature review of information systems research (2010)","DOI":"10.2139\/ssrn.1954824"},{"key":"35_CR33","unstructured":"NCSC: \nNational Cybersecurity Center\n\n. \nhttps:\/\/www.ncsc.gov.sa\/\n\n. Accessed 2019"},{"key":"35_CR34","unstructured":"SurveyMonkey Inc.: \nSurveyMonkey\n\n. \nhttps:\/\/www.surveymonkey.com\/\n\n. Accessed 2019"},{"issue":"2","key":"35_CR35","doi-asserted-by":"publisher","first-page":"81","DOI":"10.1080\/00396338.2013.784468","volume":"55","author":"C Bronk","year":"2013","unstructured":"Bronk, C., Tikk-Ringas, E.: The cyber attack on Saudi Aramco. Survival 55(2), 81\u201396 (2013)","journal-title":"Survival"},{"key":"35_CR36","unstructured":"Cheong, D.D.: Cyberattacks in the Gulf: lessons for active defence (2012)"},{"key":"35_CR37","first-page":"21","volume":"4","author":"SS Basamh","year":"2014","unstructured":"Basamh, S.S., Qudaih, H., Ibrahim, J.B.: An overview on cyber security awareness in Muslim countries. Int. J. Inf. Commun. Technol. Res. 4, 21\u201324 (2014)","journal-title":"Int. J. Inf. Commun. Technol. Res."},{"key":"35_CR38","unstructured":"ITU. \nCommitted to connecting the world\n\n. \nhttps:\/\/www.itu.int\/en\/Pages\/default.aspx\n\n. Accessed 2019"}],"container-title":["Advances in Intelligent Systems and Computing","Intelligent Computing"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-52249-0_35","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,7,3]],"date-time":"2020-07-03T23:31:12Z","timestamp":1593819072000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-030-52249-0_35"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"ISBN":["9783030522483","9783030522490"],"references-count":38,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-52249-0_35","relation":{},"ISSN":["2194-5357","2194-5365"],"issn-type":[{"value":"2194-5357","type":"print"},{"value":"2194-5365","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020]]},"assertion":[{"value":"4 July 2020","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"SAI","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Science and Information Conference","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"London","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"United Kingdom","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2020","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"16 July 2020","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"17 July 2020","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"sai2020","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/saiconference.com\/Computing","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}