Information Leakage through online social networking: opening the doorway for advanced persistence threats
The explosion of online social networking (OSN) in recent years has caused damages to organizations due to leakage of information by their employees. Employees’ social networking behaviour, whether accidental or intentional, provides an opportunity for advanced persistent threats (APT) attackers to...
Main Authors: | , , |
---|---|
Format: | Article |
Language: | English |
Published: |
Australian Institute of Professional Intelligence Officers (AIPIO)
2011
|
Subjects: | |
Online Access: | http://irep.iium.edu.my/33075/ http://irep.iium.edu.my/33075/ http://irep.iium.edu.my/33075/1/AIPIO_Vol_19_No_2_2011_Information_Leakage_thru_OSN.pdf |
id |
iium-33075 |
---|---|
recordtype |
eprints |
spelling |
iium-330752013-12-04T03:56:27Z http://irep.iium.edu.my/33075/ Information Leakage through online social networking: opening the doorway for advanced persistence threats Abdul Molok , Nurul Nuha Ahmad, Atif Chang, Shanton H61.8 Communication of information T58.6 Management information systems The explosion of online social networking (OSN) in recent years has caused damages to organizations due to leakage of information by their employees. Employees’ social networking behaviour, whether accidental or intentional, provides an opportunity for advanced persistent threats (APT) attackers to realize their social engineering techniques and undetectable zero-day exploits. APT attackers use a spear-phishing method that targets key employees of victim organizations through social media in order to conduct reconnaissance and theft of confidential proprietary information. This conceptual paper posits OSN as the most challenging channel of information leakage for organizations and explores the underlying factors that influence employee behaviour through a theoretical lens from information systems. It also describes how OSN becomes an attack vector of APT owing to employees’ social networking behaviour, and finally, discusses security education, training and awareness (SETA) for organizations to combat these threats. Australian Institute of Professional Intelligence Officers (AIPIO) 2011-07 Article PeerReviewed application/pdf en http://irep.iium.edu.my/33075/1/AIPIO_Vol_19_No_2_2011_Information_Leakage_thru_OSN.pdf Abdul Molok , Nurul Nuha and Ahmad, Atif and Chang, Shanton (2011) Information Leakage through online social networking: opening the doorway for advanced persistence threats. The Journal of the Australian Institute of Professional Intelligence Officers (AIPIO), 19 (2). pp. 38-55. ISSN 1039-1525 http://www.aipio.asn.au |
repository_type |
Digital Repository |
institution_category |
Local University |
institution |
International Islamic University Malaysia |
building |
IIUM Repository |
collection |
Online Access |
language |
English |
topic |
H61.8 Communication of information T58.6 Management information systems |
spellingShingle |
H61.8 Communication of information T58.6 Management information systems Abdul Molok , Nurul Nuha Ahmad, Atif Chang, Shanton Information Leakage through online social networking: opening the doorway for advanced persistence threats |
description |
The explosion of online social networking (OSN) in recent years has caused damages to organizations due to leakage of information by their employees. Employees’ social networking behaviour, whether accidental or intentional, provides an opportunity for advanced persistent threats (APT) attackers to realize their social engineering techniques and undetectable zero-day exploits. APT attackers use a spear-phishing method that targets key employees of victim organizations through social media in order to conduct reconnaissance and theft of confidential proprietary information. This conceptual paper posits OSN as the most challenging channel of information leakage for organizations and explores the underlying factors that influence employee behaviour through a theoretical lens from information systems. It also describes how OSN becomes an attack vector of APT owing to employees’ social networking behaviour, and finally, discusses security education, training and awareness (SETA) for organizations to combat these threats. |
format |
Article |
author |
Abdul Molok , Nurul Nuha Ahmad, Atif Chang, Shanton |
author_facet |
Abdul Molok , Nurul Nuha Ahmad, Atif Chang, Shanton |
author_sort |
Abdul Molok , Nurul Nuha |
title |
Information Leakage through online social networking: opening the doorway for advanced persistence threats |
title_short |
Information Leakage through online social networking: opening the doorway for advanced persistence threats |
title_full |
Information Leakage through online social networking: opening the doorway for advanced persistence threats |
title_fullStr |
Information Leakage through online social networking: opening the doorway for advanced persistence threats |
title_full_unstemmed |
Information Leakage through online social networking: opening the doorway for advanced persistence threats |
title_sort |
information leakage through online social networking: opening the doorway for advanced persistence threats |
publisher |
Australian Institute of Professional Intelligence Officers (AIPIO) |
publishDate |
2011 |
url |
http://irep.iium.edu.my/33075/ http://irep.iium.edu.my/33075/ http://irep.iium.edu.my/33075/1/AIPIO_Vol_19_No_2_2011_Information_Leakage_thru_OSN.pdf |
first_indexed |
2023-09-18T20:47:45Z |
last_indexed |
2023-09-18T20:47:45Z |
_version_ |
1777409789329932288 |