Um estudo sobre as boas práticas de engenharia social e a percepção das pessoas sobre o seu conceito

Abstract

In corporate and social environments the increasing use of information is important for different purposes and decision making. In this context, it is challenging for organizations and individuals to look for ways to ensure and maintain the security of potential threat information in these particular environments. Therefore, the objective of this paper is to describe the good practices related to Social Engineering that are used to prevent attacks, in order to assist in the security and prevention of obtaining information and to investigate people's perceptions of this subject. The adopted methodology consists of a literature review to identify relevant works and a quantitative research, through the application of a questionnaire. The results presented by the review indicated 3 Good Practices and 20 Security Policies that can be used by both organizations and individuals to prevent attacks. Regarding the quantitative research, it was found that 69% of participants have knowledge about Social Engineering and 54% have never heard or have little awareness of possible threats.