基于社会工程学的入侵渗透的研究

Research on Invasion of Penetration Based on Social Engineering

随着互联网用户规模的不断扩大,由社会工程学主导的网络安全问题日益突出。本文阐述社会工程学的基本理论,将社会工程学的手段和传统入侵渗透技术相结合,给出一个新的基于社会工程学的入侵渗透攻击模型。最后,将攻击模型代入攻击实例,对攻击的过程进行分析,说明此类攻击的有效性。

With the scale of lnternet users continuing to expand, network security issues dominated by social en- gineering are increasingly prominent. This paper describes the basic theory of social engineering, and combines the means of social engineering with the technology of traditional penetration, then, proposes a new aggression model of penetration based on social engineering. At the end of this paper, an attack example is put into the ag- gression model and shows the effectiveness of such attacks by analyzing the process.