IJTIMOIY MUHANDISLIK (SOCIAL ENGINEERING) HUJUMLARI VA INSON OMILI: TAHDIDLAR, PSIXOLOGIK MEXANIZMLAR VA HIMOYA STRATEGIYALARI
DOI:
https://doi.org/10.65164/6hp97535Kalit so‘zlar:
ijtimoiy muhandislik, kiberxavfsizlik, phishing, inson omili, axborot xavfsizligi, psixologik tahdidlar, ikki faktorli autentifikatsiya, xavfsizlik madaniyati, vishing, pretexting.Abstrak
Ushbu maqolada ijtimoiy muhandislik hujumlarining mohiyati, asosiy turlari, psixologik mexanizmlari va inson omilining kiberxavfsizlikdagi roli tahlil qilinadi. Metodologiya: Ilmiy adabiyotlarning tizimli sharhi, mavjud kiberxavfsizlik standartlari va hisobotlar tahlili asosida deskriptiv-analitik yondashuv qo'llanilgan. Natijalar: Phishing, vishing, smishing, baiting, pretexting va quid pro quo turidagi hujumlar tizimli tavsiflanib, ularning inson psixologiyasiga ta'sir mexanizmlari — qo'rquv, shoshilinchlik, qiziqish va avtoritetga ishonch — aniqlangan. Xulosa: Ijtimoiy muhandislik hujumlaridan samarali himoyalanish texnik vositalar bilan foydalanuvchilar xabardorligini oshirish va xavfsizlik madaniyatini shakllantirish kompleks birligiga asoslanishi kerak.
Havolalar
1.
Cialdini, R. B. (2021). Influence: The psychology of persuasion (New and expanded ed.). Harper Business.
2.
Cisco Systems. (2023). Cisco annual cybersecurity report 2023. https://www.cisco.com/c/en/us/products/security/security-reports.html
3.
ENISA — European Union Agency for Cybersecurity. (2023). ENISA threat landscape 2023. https://doi.org/10.2824/782573
4.
Hadnagy, C. (2018). Social engineering: The science of human hacking (2nd ed.). Wiley. https://doi.org/10.1002/9781119433729
5.
IBM Security. (2023). Cost of a data breach report 2023. https://www.ibm.com/reports/data-breach
676
6.
ISO/IEC 27001:2022. (2022). Information security, cybersecurity and privacy protection — Information security management systems — Requirements. International Organization for Standardization.
7.
Kaspersky Lab. (2023). Kaspersky security bulletin 2023. https://securelist.com/ksb-2023-statistics/111224/
8.
Mitnick, K. D., & Simon, W. L. (2002). The art of deception: Controlling the human element of security. Wiley Publishing.
9.
NIST — National Institute of Standards and Technology. (2023). Cybersecurity framework 2.0. https://doi.org/10.6028/NIST.CSWP.29
10.
Proofpoint. (2023). State of the phish 2023: Annual threat report. https://www.proofpoint.com/us/resources/threat-reports/state-of-phish
11.
Schneier, B. (2000). Secrets and lies: Digital security in a networked world. Wiley.
12.
Stallings, W. (2022). Network security essentials: Applications and standards (7th ed.). Pearson Education.
