An interdisciplinary view of social engineering: A call to action for research

Abstract

Social engineering is the act of using manipulation and deception to obtain access to confidential information. It is considered one of the leading threats to information security today. The topic is complex and increasing in prevalence among individuals and businesses. This paper explores the subject of social engineering from an interdisciplinary perspective. A literature review from the information technology, psychology, and business disciplines explains the interconnected nature of the topic as well as the necessity to comprehend it from multiple viewpoints. An ethical perspective follows the literature review and analyzes social engineering research from a philosophical and professional viewpoint. A proposed framework provides researchers with a flexible model to use in their studies with an emphasis on a philosophical or practical ethics perspective.

Keywords

• Social engineering
• Interdisciplinary view of social engineering
• Information security
• Ethics in social engineering research
• Information technology
• Psychology of information security