Research of the potential impact of social engineering on digital transformation processes

D O I: 10.31673/2412-9070.2024.031217

Abstract

Digital transformation reflects the process of transition of society and business to new technologies in order to improve operations and provide new opportunities. This process includes the introduction of artificial intelligence, the Internet of Things, cloud services, and many other technologies to improve business results. Such a transition promises us a number of advantages, including: flexibility and efficiency of digital processes due to total computerization; increasing the efficiency of production processes due to the Internet of Things, cloud computing and automation; improving interaction with customers based on artificial intelligence. This is far from a complete list of Digital Transformation technologies. But no matter how many technologies appear in the future, all of them, along with their advantages, create new challenges for cyber security, including those based on social engineering methods. Social engineering is manipulative and deceptive methods used to obtain confidential information, access systems, or gain control over people through the use of psychological and social mechanisms. The article examines known cases of cyberattacks using social engineering. It is shown that neither small nor large companies are immune from social engineering. The basic model of social engineering, which is based on the tendency of people to transfer all information and perform illogical actions, was studied. Social engineering technologies were analyzed: Pretexting, Phishing, Road apple, Shoulder surfing, Service for service. Potential threats from social engineering methods for systems: SCADA, Cloud Computing, Internet of Things, Drones, Big Data, Blockchain, Artificial Intelligence and Social Networks are assessed. The key means of countering social engineering in the era of digital transformation have been identified. Conclusions are made regarding the impact of social engineering in the future.

Keywords: digital transformation; social engineering; phishing; pretexting; Internet of Things; cloud computing; SCADA.