Some Recommended Protection Technologies for Cyber Crime Based on Social Engineering Techniques -- Phishing

TL;DR

This paper reviews phishing as a social engineering cyber crime, analyzing attack stages and detection technologies, and offers recommendations for prevention targeting consumers and companies.

Contribution

It provides a comprehensive analysis of phishing attack stages, detection methods, and practical prevention recommendations, enhancing cybersecurity defenses against social engineering attacks.

Findings

Identification of key phishing attack stages

Evaluation of detection technologies for phishing websites

Practical prevention strategies for consumers and companies

Abstract

Phishing (password + fishing) is a form of cyber crime based on social engineering and site spoofing techniques. The name of 'phishing' is a conscious misspelling of the word 'fishing' and involves stealing confidential data from a user's computer and subsequently using the data to steal the user's money. In this paper, we study, discuss and propose the phishing attack stages and types, technologies for detection of phishing web pages, and conclude our paper with some important recommendations for preventing phishing for both consumer and company.