코로나19 이후 한국의 사회공학적 공격에 관한 연구: 포커스 그룹 인터뷰를 중심으로
A Study on the Social Engineering Attacks in Korea after COVID-19 : Based on Focus Group Interviews
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
코로나19는 우리 사회의 다양한 분야에 많은 부분을 변화시켰다. 코로나19는 범죄에도 영향을 미쳐 다양한 형태로 사람들의 심리를 자극하였고, 결과적으로 사회공학적 공격의 발생률이 증가하였다. 이 연구는 코로나19로 인한 사회공학적 공격 수법의 변화가 어떠하였는지와 코로나19 전후로 사회공학적 공격이 증가한 원인에 대하여 파악하고자 하였다. 전문가를 대상으로 한 포커스 그룹 인터뷰(Focus Group Interview)를 실시하여 연구문제에 대한 답을 도출하고자 하였고, 연구결과는 다음과 같다. 먼저, 코로나19로 인해 사회공학적 공격의 수법은 ‘코로나19 관련 경제상품(대출) 정보’와 ‘코로나19 관련 정부 정책 및 지침’을 악용하고, ‘보건 관련 기구 및 공공기관 사칭’을 하는 형태로 변화하였다. 다음으로, 코로나19 전후로 사회공학적 공격이 증가한 원인으로는 ‘팬데믹으로 인한 불안감 증가’, ‘팬데믹 관련 정보에 대한 열망’, ‘비대면 환경으로의 전환’이 도출되었다.
Abstract
COVID-19 has changed many parts of our society. COVID-19 also affected crime, which stimulated people's psychology in various forms, and as a result, the incidence of social engineering attacks increased. This study attempts to understand the way Social Engineering Attack techniques changed and the causes of the increase in Social Engineering Attacks before and after COVID-19. The researchers conducted Focus Group Interview to derive answers to research questions, and the research results are as follows. First, before and after the COVID-19 pandemic, the Social Engineering Attack techniques changed to ‘exploit COVID-19-related economic commodity(loan) information and government policies and guidelines related to COVID-19’ and ‘impersonate health-related organizations and public institutions.’ Next, the reasons for the increase in Social Engineering Attack before and after the COVID-19 pandemic were ‘an increase in anxiety due to pandemic', ‘a desire for pandemic-related information', and ’a transition to a non-face-to-face environment'.
참고문헌 (40)
- "2020년 사이버범죄 동향 분석 보고서" (2021), 경찰청[URL]
- "코로나19 팬데믹에 따른 사이버공격 변화 양상과 대응방안" (2021), 국가안보전략연구원[URL]
- "아태 지역 사이버공격 53% ↑…"원격근무가 보안 허점 확대"" (2021), 김윤희[URL]
- 김학범, "사회환경 변화에 따른 범죄양상의 특성에 대한 분석 연구", 사회융합연구, 4(5), pp.47~55 (2020), 국방안보연구소[DOI]
- "세계가 거듭 인정한 한국의 코로나19 대응" (2022), 문화체육관광부[URL]
- 박종필, "전자금융사기의 사회공학적 진화:FGI를 통한 실제 피해자 분석", 디지털융복합연구, 16(7), pp.9~17 (2018), 한국디지털정책학회[DOI]
- 박한영, "코로나19 확산에 따른 국내 택배서비스 이용행태 변화", 교통연구, 28(2), pp.51~66 (2021), 한국교통연구원[DOI]
- "국내 코로나19 방역대책의 변화: ‘위드코로나’(with Corona) 이후를중심으로 –1" (2022), 보건간호사회[URL]
- 오세연, "코로나19 감염병 유행 시기에 따른 분기별 범죄특성 비교분석", 한국재난정보학회 논문집, 17(4), pp.674~683 (2021), 한국재난정보학회
- 임채호, "심리적 보안관점에서의 사이버범죄 프로파일링", 정보보호학회논문지, 19(4), pp.115~124 (2009), 한국정보보호학회
- 임형진, "코로나19가 범죄에 미친 영향 - 112 신고 데이터를 중심으로 -", 시큐리티연구, pp.233~254 (2020), 한국보안관리학회
- 조상현, "코로나19 시대 범죄 관련 이슈와 시사점", 한국치안행정논집, 18(3), pp.207~220 (2021), 한국치안행정학회[DOI]
- Akdemir, N., "How phishers exploit the coronavirus pandemic: A con tent analysis of COVID-19 themed phishing emails", SAGE Open, 11(3), pp.21582440211031879~ (2021)
- Alzahrani, A., "Coronavirus social engineering attacks : Issues and recommendations", International Journal of Advanced Computer Science and Applications, 11(5), pp.154~161 (2020)
- Amarullah, A. H., "Analyzing cyber crimes during Covid-19 time in Indonesia", 2021 3rd International Conference on Computer Communication and the Internet (ICCCI), pp.78~83 (2021), IEEE
- Bokovnya, A. Y., "Computer crimes on the COVID-19 scene : analysis of social, legal, and cr iminal threats", Cuestiones Políticas, 38(66), pp.463~472 (2020)
- Chaganti, R., "Recent trends in Social E ngineering Scams and Case study of Gift Card Scam", arXiv preprint arXiv:2110.06487, ~ (2021)
- Cohen, L. E., "Social change and crime rate trends : A routine activ ity approach", American sociological review, 44, pp.588~608 (1979)
- Cohen, L. E., "Classics in environmental criminology", pp.203~232 (1979), Routledge
- The implications of the COVID -19 pandemic for cybercrime policing in Scotland: A rapid review of the evidence and future considerations, "Collier, B.", Scottish Institute for Policing Research, ~ (2020)
- Creswell, J. W., "Qualitative inquiry and research design: Choosing among five approaches" (2016), Sage publications
- Eian, I. C., "Cyber attacks in the era of covid-19 and possible solution domains", ~ (2020)
- Gryszczyńska, A., "The impact of the COVID-19 pandemic on cybercrime. Bulleti n of the Polish Academy of Sciences", Technical Sciences, 69(4), pp.e137933~ (2021)
- Hijji, M., "A multivocal literature review on growing social engineerin g based cyber-attacks", threats during the COVID-19 pandemic: challenges and pro spective solutions, 2021, pp.9, 7152~7169
- Kashif, M., "A surge in cyber-crime during COVID-19", Indonesian Journal of Social and Environmental Issues(IJSEI), 1(2), pp.48~52 (2020)
- Khweiled, R., "Cybercrimes during COVID-19 Pandemic", International Journal of Information Engineering & Electronic Business, 13(2), pp.1~10 (2021)
- Kikerpill, K., "Mazephishing : The COVID-19 pandemic as credible social context for social engineering attacks", Trames : A Journal of the Humani ties and Social Sciences, 25(4), pp.371~393 (2021)
- Kontio, J., "Using the focus group method in soft ware engineering: obtaining practitioner and user experiences", Proceedings. 2004 International Symposium on Empirical Software Engineering, 2004. ISESE'04, pp.271~280 (2004), IEEE
- Kumar, A., "COVID 19 and its mental health consequences", Journal of Mental Health, 30(1), pp.1~2 (2020)
- Lallie, H. S., "Cyber security in the age of COVID-19 : A timeline and analysis of cyber-crime and cyber-attacks during the pandemic", Computers & Security, 105, pp.102248~ (2021)
- Ma, K. W. F., "COVID-19 and cyber fraud: Emerging threats during the pandemic", Journal of Financial Crime, 29(2), pp.433~446 (2021)
- Mashtalyar, N., "Social engineering attacks: Recent advances and challenges", International Conference on Human-Computer Interaction, pp.417~431 (2021), Springer
- Mitnick, K. D., "The art of deception: Controlling the human ele ment of security" (2003), John Wiley & Sons
- Mouton, F., "Social engineering attack framework", 2014 Information Security for South Africa, pp.1~9 (2014), IEEE
- Naidoo, R., "A multi-level influence model of COVID-19 themed cybercrime", European Journal of Information Systems, 29(3), pp.306~321 (2020)
- Plachkinova, M., "Exploring the Shift from Physical to Cybercrime at the Onset of the COVID-19 Pandemic", International Journal of Cyber Forensics and Advan ced Threat Investigations, 2(1), pp.50~62 (2021)
- Pritom, M. M. A., "Characterizing the landscape of covid-19 themed cyberattacks and defenses", 2020 IEEE International Conference on Intelligence and Security Informatics (ISI), pp.1~6 (2020), IEEE
- Richardson, C. A., "A question of access: an exploration of the facto rs that influence the health of young males aged 15 to 19 living in Corby and their use of health care services", Health education journal, 60(1), pp.3~16 (2001)
- "Shiftee Announced Results of Big Data Analysis on Telecommuting in 2020-2021" (2022)[URL]
- Venkatesha, S., "Social engineering attacks during the COVID-19 pandemic", SN computer science, 2(2), pp.1~9 (2021)