{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,16]],"date-time":"2026-07-16T21:40:26Z","timestamp":1784238026666,"version":"3.55.0"},"reference-count":146,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/501100012166","name":"National Basic Research Program of China","doi-asserted-by":"publisher","award":["2017YFB0802804"],"award-info":[{"award-number":["2017YFB0802804"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"Joint Fund of the National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U1766215"],"award-info":[{"award-number":["U1766215"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2020]]},"DOI":"10.1109\/access.2020.2992807","type":"journal-article","created":{"date-parts":[[2020,5,6]],"date-time":"2020-05-06T20:08:56Z","timestamp":1588795736000},"page":"85094-85115","source":"Crossref","is-referenced-by-count":137,"title":["Defining Social Engineering in Cybersecurity"],"prefix":"10.1109","volume":"8","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1982-5657","authenticated-orcid":false,"given":"Zuoguang","family":"Wang","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Limin","family":"Sun","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hongsong","family":"Zhu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","volume":"4","year":"1992","journal-title":"Telco trashing yields big rewards"},{"key":"ref38","first-page":"1","article-title":"Information security technology? Don&#x2019;T rely on it: A case study in social engineering","volume":"5","author":"winkler","year":"1995","journal-title":"Proc 5th Conf USENIX UNIX Secur Symp (SSYM)"},{"key":"ref33","volume":"2","year":"1988","journal-title":"Social Engineering"},{"key":"ref32","first-page":"181","article-title":"In search of the cuckoo&#x2019;s nest (computer security)","author":"kluepfel","year":"1991","journal-title":"Proc 25th Annu IEEE Int Carnahan Conf Secur Technol"},{"key":"ref31","volume":"4","author":"quittner","year":"1992","journal-title":"Interview with ice man and maniac"},{"key":"ref30","author":"lapsley","year":"2013","journal-title":"Exploding the Phone The Untold Story of the Teenagers and Outlaws Who Hacked Ma Bell"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.2514\/6.1987-3093"},{"key":"ref36","first-page":"700","article-title":"Cracking a social engineer","volume":"8","author":"berg","year":"1995","journal-title":"Comput Secur"},{"key":"ref35","article-title":"Secrets a super hacker","author":"fiery","year":"1994","journal-title":"The Knightmare 1994 Secrets of a Super Hacker"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/CCST.1989.751947"},{"key":"ref28","year":"2001","journal-title":"The Secret History of Hacking"},{"key":"ref27","author":"hafner","year":"1995","journal-title":"Cyberpunk Outlaws and Hackers on the Computer Frontier Revised"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2017.10.008"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.7763\/IJEEEE.2013.V3.278"},{"key":"ref22","article-title":"More on trashing","volume":"1","year":"1984","journal-title":"2600 Magazine The Hacker&#x2019;s Quarterly"},{"key":"ref21","article-title":"Social engineering: An attack vector most intricate to tackle","author":"thapar","year":"2007"},{"key":"ref24","author":"shadow","year":"1985","journal-title":"How to Run a Successful Teleconference"},{"key":"ref23","year":"1984","journal-title":"Vital Ingredients Switching Centers and Operators"},{"key":"ref101","year":"2018","journal-title":"Trustedsec\/Social-Engineer-Toolkit"},{"key":"ref26","author":"sterling","year":"1993","journal-title":"Hacker Crackdown Law and Disorder on the Electronic Frontier"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2016.12.013"},{"key":"ref25","year":"1990","journal-title":"The history of The Legion Of Doom"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-44208-1_22"},{"key":"ref51","year":"2005","journal-title":"CNN com&#x2014;A Convicted Hacker Debunks Some Myths"},{"key":"ref146","author":"redmon","year":"2005","journal-title":"Mitigation of Social Engineering Attacks in Corporate America"},{"key":"ref59","author":"gragg","year":"2003","journal-title":"A Multi-level Defense Against Social Engineering"},{"key":"ref58","first-page":"34","article-title":"Social engineering: I-E based model of human weakness to investigate attack and defense","volume":"1","author":"fan","year":"2016","journal-title":"SCIREA J Inf Sci Syst Sci"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1108\/IMCS-09-2012-0053"},{"key":"ref56","first-page":"1","article-title":"The cycle of deception: A model of social engineering attacks, defenses and victims","author":"nohlberg","year":"2008","journal-title":"HAIS"},{"key":"ref55","year":"2019","journal-title":"Social Engineering Definition of Social Engineering in English by Oxford Dictionaries"},{"key":"ref54","year":"2019","journal-title":"Social Engineering (Security)"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-31979-5_12"},{"key":"ref52","doi-asserted-by":"crossref","DOI":"10.31274\/etd-180810-436","article-title":"Information technology social engineering: An academic definition and study of social engineering-analyzing the human firewall","author":"evans","year":"2009"},{"key":"ref40","author":"winkler","year":"1998","journal-title":"Social Engineering and Reverse Social Engineering"},{"key":"ref4","year":"2019","journal-title":"Ninth Annual Cost of Cybercrime Study"},{"key":"ref3","year":"2018","journal-title":"Cyberthreats Increasing But Shifting With Ransomware Attacks Down 17 Percent"},{"key":"ref6","year":"1997","journal-title":"People Hacking The Psychology of Social Engineering"},{"key":"ref5","article-title":"Social engineering audits using anonymous surveys: Conning the users in order to know if they can be conned","author":"nohlberg","year":"2005","journal-title":"Proc 4th Secur Conf"},{"key":"ref8","year":"2013","journal-title":"Exclusive Snowden Persuaded Other NSA Workers to Give Up Passwords"},{"key":"ref49","article-title":"Development of methodical social engineering taxonomy project","author":"laribee","year":"2006"},{"key":"ref7","author":"mitnick","year":"2001","journal-title":"My first RSA Conference"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/1059524.1059554"},{"key":"ref46","first-page":"4","article-title":"The origins of social engineering","volume":"1","author":"dang","year":"2008","journal-title":"McAfee Security J"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1201\/1086\/43312.9.5.20001112\/31378.10"},{"key":"ref48","author":"mitnick","year":"2011","journal-title":"The Art of Deception Controlling the Human Element of Security"},{"key":"ref47","article-title":"The &#x2018;social engineering&#x2019; of Internet fraud","author":"rusch","year":"1999","journal-title":"Proc 7th Annu Conf Internet Soc"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1111\/1467-954X.00139"},{"key":"ref41","article-title":"Social engineering fundamentals, part I: Hacker tactics","author":"granger","year":"2001"},{"key":"ref44","article-title":"Social engineering fundamentals, part II: Combat strategies","author":"granger","year":"2002"},{"key":"ref43","article-title":"Physical penetrations: The art of advanced social engineering","author":"higgins","year":"2001"},{"key":"ref127","doi-asserted-by":"publisher","DOI":"10.4324\/9781315864327"},{"key":"ref126","article-title":"The compatibility between classical view of categorization and prototype theory from the perspective of meaning holism","author":"lingyu","year":"2014"},{"key":"ref125","doi-asserted-by":"crossref","DOI":"10.1093\/oso\/9780199266647.001.0001","author":"taylor","year":"2003","journal-title":"Linguistic Categorization prototypes in linguistic Theory"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.4324\/9781315835396"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1201\/1086.1065898X\/46353.15.4.20060901\/95427.3"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1145\/2076732.2076746"},{"key":"ref129","author":"hurley","year":"2014","journal-title":"A Concise Introduction to Logic"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1504\/IJIPSI.2018.092057"},{"key":"ref128","doi-asserted-by":"publisher","DOI":"10.1016\/0010-0277(83)90012-4"},{"key":"ref70","author":"bullee","year":"2017","journal-title":"Experimental Social Engineering Investigation and Prevention"},{"key":"ref76","article-title":"The impact of source characteristics on users&#x2019; susceptibility to social engineering victimization in social networks","author":"algarni","year":"2016"},{"key":"ref130","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-13-0320-3_1"},{"key":"ref77","article-title":"Fighting social engineering&#x2014;Increasing information security in organizations by combining scenario based learning and psychological factors of persuasion","author":"hermansson","year":"2005"},{"key":"ref74","author":"lu","year":"2006","journal-title":"Social engineering leading non-traditional information security"},{"key":"ref75","author":"fan","year":"2008","journal-title":"Hacker Social Engineering Attacks[M]"},{"key":"ref133","first-page":"44","article-title":"The human element: The weakest link in information security","volume":"204","author":"lineberry","year":"2007","journal-title":"Journal of Accountancy New York"},{"key":"ref134","year":"2015","journal-title":"USSocial Engineering in the Internet of Things (IoT)"},{"key":"ref131","first-page":"1","article-title":"Define cyberspace security","volume":"4","author":"fang","year":"2018","journal-title":"Chin J Netw Inf Secur"},{"key":"ref78","article-title":"Social engineering: understanding, measuring and protecting against attacks","author":"nohlberg","year":"2007"},{"key":"ref132","article-title":"Psychology: A precious security tool","author":"lafrance","year":"2004"},{"key":"ref79","first-page":"12","article-title":"A practical assessment of social engineering vulnerabilities","author":"bakhshi","year":"2008","journal-title":"HAIS"},{"key":"ref136","doi-asserted-by":"publisher","DOI":"10.1109\/STAST.2014.12"},{"key":"ref135","author":"pfleeger","year":"2003","journal-title":"Security in Computing"},{"key":"ref138","first-page":"543","article-title":"A comprehensive study of social engineering&#x2014;The art of mind hacking","volume":"2","author":"dhiman","year":"2017","journal-title":"IJSRCSEIT"},{"key":"ref137","author":"winkler","year":"1997","journal-title":"Corporate Espionage What It Is Why It is Happening in Your Company What You Must Do About It"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1016\/j.chb.2016.02.050"},{"key":"ref139","article-title":"Mitigating the risk of social engineering attacks","author":"spinapolice","year":"2011"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.5121\/jgraphoc.2010.2202"},{"key":"ref61","article-title":"Information security awareness measuring & social engineering 2.0. Assessment of information security awareness (ISA) in the Belgian healthcare sector using an enhanced HAIS-Q","author":"schaeken","year":"2018"},{"key":"ref63","author":"samani","year":"2015","journal-title":"Hacking the human operating system the role of social engineering within cybersecurity"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.21125\/inted.2017.1008"},{"key":"ref140","doi-asserted-by":"publisher","DOI":"10.1016\/S1353-4858(01)00716-4"},{"key":"ref65","author":"hadnagy","year":"2010","journal-title":"Social Engineering The Art of Human Hacking"},{"key":"ref141","first-page":"557","article-title":"Social engineering: A partial technical attack","volume":"9","author":"maan","year":"2012","journal-title":"Int J Comput Sci Issues"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1145\/1866423.1866435"},{"key":"ref142","article-title":"Social engineering, the USB way","author":"stasiukonis","year":"2006"},{"key":"ref67","article-title":"Securing information assets: Understanding, measuring and protecting against social engineering attacks","author":"nohlberg","year":"2008"},{"key":"ref143","doi-asserted-by":"publisher","DOI":"10.1109\/EC2ND.2010.16"},{"key":"ref68","year":"2018","journal-title":"Best Practices for Social Engineering Attacks"},{"key":"ref144","doi-asserted-by":"publisher","DOI":"10.1109\/CCAA.2016.7813778"},{"key":"ref2","year":"2016","journal-title":"2016 Cybersecurity Snapshot"},{"key":"ref69","article-title":"The threat of social engineering and your defense against it","author":"gulati","year":"2003"},{"key":"ref145","article-title":"Vishing attack detection model for mobile users","author":"maseno","year":"2017"},{"key":"ref1","article-title":"The risk of social engineering on information security: A survey of IT professionals","year":"2011"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.1109\/MSPEC.2013.6471059"},{"key":"ref95","year":"2014","journal-title":"Why it is called Internet of Things Definition history disambiguation Retrieved"},{"key":"ref108","first-page":"493","article-title":"An innovative and comprehensive framework for social driven vulnerability assessment","volume":"2","author":"frumento","year":"2014","journal-title":"Magdeburger Journal zur Sicherheitsforschung"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.5120\/11406-6726"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-22424-9_4"},{"key":"ref93","year":"2018","journal-title":"Pinterest"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-70278-0_39"},{"key":"ref92","article-title":"The role of social engineering in evolution of attacks","author":"frumento","year":"2016"},{"key":"ref105","first-page":"80","article-title":"The use of formal social engineering techniques to identify weaknesses during a computer vulnerability competition","volume":"26","author":"kvedar","year":"2010","journal-title":"J Comput Sci Coll"},{"key":"ref91","first-page":"13","article-title":"Social engineering 2.0: What&#x2019;s next","author":"jakobsson","year":"2008","journal-title":"McAfee Security J"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1145\/1290958.1290968"},{"key":"ref90","author":"bisson","year":"2015","journal-title":"5 Social Engineering Attacks to Watch Out For"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1145\/2808705.2808717"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1108\/IMCS-11-2013-0083"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1109\/CSE.2009.205"},{"key":"ref112","first-page":"1","article-title":"Honeybot, your man in the middle for automated social engineering","author":"lauinger","year":"2010","journal-title":"Proc lEE"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1016\/j.techsoc.2010.07.001"},{"key":"ref98","article-title":"Undermining-social engineering using open source intelligence gathering","author":"ball","year":"2012","journal-title":"Proc 4th Int Conf Knowl Discovery Inf Retr (KDIR)"},{"key":"ref99","article-title":"The devil is in the details: Social engineering by means of social media","author":"scheelen","year":"2012"},{"key":"ref96","year":"2018","journal-title":"Industry 4 0"},{"key":"ref97","first-page":"20","article-title":"Social engineering in the Internet of everything","volume":"29","author":"gan","year":"2016","journal-title":"Cutter IT J"},{"key":"ref10","first-page":"4","article-title":"Cyberskepticism: The mind&#x2019;s Firewall","author":"thomas","year":"2008","journal-title":"Spring"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/FiCloud.2016.28"},{"key":"ref12","article-title":"Targeted attacks and the human vulnerability","author":"van mourik","year":"2017"},{"key":"ref13","first-page":"4","article-title":"Re-floating the titanic: Dealing with social engineering attacks","author":"harley","year":"1998","journal-title":"Proc EIC"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/FGCN.2007.185"},{"key":"ref15","first-page":"1","article-title":"Generic taxonomy of social engineering attack","author":"foozy","year":"2011","journal-title":"Proceedings of MUiCET"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.1145\/3075564.3076260"},{"key":"ref16","article-title":"Managing social engineering risk: Making social engineering transparant","author":"oosterloo","year":"2008"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.14236\/ewic\/HCI2016.94"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.1145\/2996758.2996767"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/2835375"},{"key":"ref81","author":"larson","year":"2003","journal-title":"CCSP Cisco Certified Security Professional Certification All-in-One Exam Guide"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/2523514.2523596"},{"key":"ref84","article-title":"Social engneering: Humans are the prominent reason for the continuance of these types of attacks","author":"whiteman","year":"2017"},{"key":"ref119","author":"aristotle","year":"1971","journal-title":"Categories"},{"key":"ref19","first-page":"1","article-title":"A taxonomy for social engineering attacks","author":"ivaturi","year":"2011","journal-title":"Int Conf Inf Resour Manag"},{"key":"ref83","doi-asserted-by":"crossref","first-page":"8","DOI":"10.20943\/01201702.816","article-title":"Social engineering framework: Understanding the deception approach to human element of security","volume":"14","author":"indrajit","year":"2017","journal-title":"Int J Comput Sci Issues"},{"key":"ref114","article-title":"Where do the phishers live? Collecting phishers&#x2019; geographic locations from automated honeypots","author":"gallagher","year":"2016","journal-title":"Proc ShmooCon"},{"key":"ref113","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-15512-3_22"},{"key":"ref116","first-page":"1","article-title":"DeepPhish: Simulating malicious AI","author":"bahnsen","year":"2018","journal-title":"Proc APWG Symp Electron Crime Res (eCrime)"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.19101\/IJACR.2016.623006"},{"key":"ref115","first-page":"37","article-title":"Weaponizing data science for social engineering: Automated E2e spear phishing on Twitter","author":"seymour","year":"2016","journal-title":"Proc Black Hat USA"},{"key":"ref120","author":"wittgenstein","year":"2009","journal-title":"Philosophical Investigations"},{"key":"ref89","year":"2013","journal-title":"Ussocial Engineering Hacking The Human OS"},{"key":"ref121","doi-asserted-by":"publisher","DOI":"10.1016\/0010-0285(73)90017-0"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.1037\/0096-3445.104.3.192"},{"key":"ref123","author":"rosch","year":"1978","journal-title":"Cognition and Categorization"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1007\/11507840_9"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1145\/1940976.1941003"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1080\/0144929X.2013.763860"},{"key":"ref88","article-title":"Social engineering and awareness training","author":"cruz","year":"2010"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/8948470\/09087851.pdf?arnumber=9087851","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,8,5]],"date-time":"2024-08-05T11:12:56Z","timestamp":1722856376000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9087851\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"references-count":146,"URL":"https:\/\/doi.org\/10.1109\/access.2020.2992807","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020]]}}}