基于社会工程学的邮件样本关联分析

摘要

Starting from the email attacks and hazards of view based on social engineering, the paper deeply analysis email attacks based on social engineering. Currently, email attack based on social engineering techniques is a common method of attack, and is an important channel of the malicious code. This paper relies on a number of captured events, and correlative analysis attack method by means of communication and attachment file of email. Finally, by extracting similar characteristic, the paper digs out more similar attack email, and gives the overall correlation analysis and summary.%文章从基于社会工程学的邮件攻击方式和造成的危害出发,对利用社会工程学的电子邮件攻击进行了深入的分析.目前利用社会工程学技巧依托电子邮件发起攻击已是常见攻击方法,是当前恶意代码流行的重要手段.文章依托捕获的一些安全事件,对邮件的传播手段、附件文件的攻击方法进行了关联分析.最后,通过提取同类特征挖掘出更多的类似攻击邮件,并进行了整体的关联分析与总结.