Assessment of the Information System's Protection Degree from Social Engineering Attack Action of Malefactor While Changing the Characteristics of User's Profiles: Numerical Experiments

摘要

The article describes an approach to the analysis of changes in the user's protection level from the social engineering attack actions of malefactor in the case of applying two strategies to increase the level of protection. The first deals with changing information system's users (dismissal/advanced training), and second is changes in user access policies to critical information stored in such information systems. Numerical experiment is also presented.