Abstract— Social networking sites (SNSs), with their large numbers of users and large information base, seem to be perfect breeding grounds for exploiting the vulnerabilities of people, the weakest link in security. Deceiving, persuading, or influencing people to provide information or to perform an action that will benefit the attacker is known as “social engineering”. While technology-based security has been addressed by research and may be well understood, social engineering is more challenging to understand and manage, especially in new environments such as SNSs, owing to some factors of SNSs that reduce the ability of users to detect the attack and increase the ability of attackers to launch it. This work will contribute to the knowledge of social engineering by presenting the first two conceptual models of social engineering attacks in SNSs. Phase-based and source-based models are presented, along with an intensive and comprehensive overview of different aspects of social engineering threats in SNSs.

Index Terms— Social engineering, social networking sites, information security, deception, privacy.

Abdullah Algarni and Yue Xu are with Queensland University of Technology, Science and Engineering Faculty, Brisbane, Australia (e-mail: abdullahayedm.algarni@student.qut.edu.au, yue.xu@qut.edu.au).

Cite: Abdullah Algarni and Yue Xu, " Social Engineering in Social Networking Sites: Phase-Based and Source-Based Models," International Journal of e-Education, e-Business, e-Management and e-Learning vol. 3, no. 6, pp. 456-462, 2013.