A Study of Quantitative Modelling Methods for Social Engineering Simulation Considering Dialogue-Session Mechanisms

With the rapid development of Internet technology, social engineering attacks are showing a rapidly growing trend. However, the current description of the operation mechanism of social engineering still lacks uniformity. In order to carry out social engineering defense, it becomes crucial to study social engineering models. In this study, by summarizing a large number of social engineering attack cases and combining with previous research, a social engineering model based on dialogue and session mechanisms is proposed. The model breaks the traditional loop form by describing a complete social engineering attack as an ordered combination of multiple social engineering atomic attacks, and further introduces a model for estimating the strength of interactions between users. In order to evaluate the proposed social engineering model, we refine two evaluation criteria, JS scatter value and hook rate, and combine them with social engineering simulation elements to form an evaluation description of the model. Finally, we apply the model to a typical social engineering attack case study in order to provide guidance for defending against social engineering attacks, to shorten the time delay between the research process and the development of the actual problem, and to reduce the impacts and hazards caused by the attack events.