title: ÐÐ±Ð½Ð°ÑÑÐ¶ÐµÐ½Ð¸Ðµ ÑÐ¾ÑÐ¸Ð¾ÑÐµÑ Ð½Ð¸ÑÐµÑÐºÐ¸Ñ Ð°ÑÐ°Ðº Ð½Ð° Ð¾ÑÐ½Ð¾Ð²Ðµ ÑÐ²ÑÐ¸ÑÑÐ¸ÑÐµÑÐºÐ¾Ð³Ð¾ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° ÑÐ¾Ð¾Ð±ÑÐµÐ½Ð¸Ð¹
title: Ð²ÑÐ¿ÑÑÐºÐ½Ð°Ñ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° Ð±Ð°ÐºÐ°Ð»Ð°Ð²ÑÐ°
titleType: Subtitle
title: Socio-technical attacks detection based on heuristic analysis of messages
Creators: name: Ð¢Ð¾Ð»Ð³Ð¾ÑÐµÐ½ÐºÐ¾, ÐÐ³Ð¾Ñ
Publisher: name: Ð¡Ð°Ð½ÐºÑ-ÐÐµÑÐµÑÐ±ÑÑÐ³ÑÐºÐ¸Ð¹ Ð¿Ð¾Ð»Ð¸ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ð¹ ÑÐ½Ð¸Ð²ÐµÑÑÐ¸ÑÐµÑ ÐÐµÑÑÐ° ÐÐµÐ»Ð¸ÐºÐ¾Ð³Ð¾
Year: 2023
Subjects: ÑÐ¸ÑÐ¸Ð½Ð³
Ð¾Ð±Ð½Ð°ÑÑÐ¶ÐµÐ½Ð¸Ðµ Ð°ÑÐ°Ðº
ÑÐ¾ÑÐ¸Ð¾ÑÐµÑ Ð½Ð¸ÑÐµÑÐºÐ¸Ðµ Ð°ÑÐ°ÐºÐ¸
ÑÐ¾ÑÐ¼Ñ Ð°ÑÑÐµÐ½ÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¸
phishing
attack detection
sociotechnical attacks
authentication forms

description: Ð¦ÐµÐ»ÑÑ Ð½Ð°ÑÑÐ¾ÑÑÐµÐ¹ Ð´Ð¸Ð¿Ð»Ð¾Ð¼Ð½Ð¾Ð¹ ÑÐ°Ð±Ð¾ÑÑ ÑÐ²Ð»ÑÐµÑÑÑ Ð¾Ð±Ð½Ð°ÑÑÐ¶ÐµÐ½Ð¸Ðµ ÑÐ¾ÑÐ¸Ð¾ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ñ Ð°ÑÐ°Ðº Ð¸ Ð¿Ð¾Ð´Ð´ÐµÐ»ÑÐ½ÑÑ ÑÐ¾ÑÐ¼ Ð°ÑÑÐµÐ½ÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¸ Ð½Ð° Ð¾ÑÐ½Ð¾Ð²Ðµ ÑÐ²ÑÐ¸ÑÑÐ¸ÑÐµÑÐºÐ¾Ð³Ð¾ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° Ð¿Ð¾ÑÑÐ¾Ð²ÑÑ ÑÐ¾Ð¾Ð±ÑÐµÐ½Ð¸Ð¹. ÐÑÐµÐ´Ð¼ÐµÑÐ¾Ð¼ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ ÑÐ²Ð»ÑÑÑÑÑ ÑÐ¿Ð¾ÑÐ¾Ð±Ñ Ð¾Ð±Ð½Ð°ÑÑÐ¶ÐµÐ½Ð¸Ñ ÑÐ¾ÑÐ¸Ð¾ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ñ Ð°ÑÐ°Ðº Ð½Ð° Ð¾ÑÐ½Ð¾Ð²Ðµ ÑÐ²ÑÐ¸ÑÑÐ¸ÑÐµÑÐºÐ¾Ð³Ð¾ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° ÑÐ¾Ð¾Ð±ÑÐµÐ½Ð¸Ð¹ Ð¸ ÑÐ¾ÑÐ¼ Ð°ÑÑÐµÐ½ÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¸. ÐÐ°Ð´Ð°ÑÐ¸, ÑÐµÑÐ°ÐµÐ¼ÑÐµ Ð² ÑÐ¾Ð´Ðµ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ: 1. Ð°Ð½Ð°Ð»Ð¸Ð· Ð¼ÐµÑÐ¾Ð´Ð¾Ð² Ð¸ ÑÑÐµÐ´ÑÑÐ², Ð¸ÑÐ¿Ð¾Ð»ÑÐ·ÑÐµÐ¼ÑÑ Ð°ÑÐ°ÐºÑÑÑÐ¸Ð¼Ð¸ Ð¿ÑÐ¸ Ð¿ÑÐ¾Ð²ÐµÐ´ÐµÐ½Ð¸Ð¸ ÑÐ¾ÑÐ¸Ð¾ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ñ Ð°ÑÐ°Ðº Ñ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ð¸ÐµÐ¼ ÑÐ¸ÑÐ¸Ð½Ð³Ð¾Ð²ÑÑ Ð¿Ð¾ÑÑÐ¾Ð²ÑÑ Ð¾ÑÐ¿ÑÐ°Ð²Ð»ÐµÐ½Ð¸Ð¹; 2. Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ðµ Ð¼ÐµÑÐ¾Ð´Ð¾Ð² Ð¸ ÑÑÐµÐ´ÑÑÐ² Ð²ÑÑÐ²Ð»ÐµÐ½Ð¸Ñ ÑÐ¸ÑÐ¸Ð½Ð³Ð¾Ð²ÑÑ ÑÐ¾Ð¾Ð±ÑÐµÐ½Ð¸Ð¹ Ð¸ Ð¿Ð¾Ð´Ð´ÐµÐ»ÑÐ½ÑÑ ÑÐ¾ÑÐ¼ Ð°ÑÑÐµÐ½ÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¸; 3. ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ° ÑÐ¿Ð¾ÑÐ¾Ð±Ð° Ð²ÑÑÐ²Ð»ÐµÐ½Ð¸Ñ ÑÐ¸ÑÐ¸Ð½Ð³Ð¾Ð²ÑÑ ÑÐ¾Ð¾Ð±ÑÐµÐ½Ð¸Ð¹ Ð¸ Ð¿Ð¾Ð´Ð´ÐµÐ»ÑÐ½ÑÑ ÑÐ¾ÑÐ¼ Ð°ÑÑÐµÐ½ÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¸ Ð½Ð° Ð¾ÑÐ½Ð¾Ð²Ðµ ÑÐ²ÑÐ¸ÑÑÐ¸ÑÐµÑÐºÐ¾Ð³Ð¾ Ð°Ð½Ð°Ð»Ð¸Ð·Ð°; 4. ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ° Ð¿ÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð½Ð¾Ð³Ð¾ ÑÑÐµÐ´ÑÑÐ²Ð° Ð´Ð»Ñ Ð²ÑÑÐ²Ð»ÐµÐ½Ð¸Ñ ÑÐ¾ÑÐ¸Ð¾ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ñ Ð°ÑÐ°Ðº Ñ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ð¸ÐµÐ¼ ÑÐ¸ÑÐ¸Ð½Ð³Ð¾Ð²ÑÑ Ð¿Ð¾ÑÑÐ¾Ð²ÑÑ Ð¾ÑÐ¿ÑÐ°Ð²Ð»ÐµÐ½Ð¸Ð¹. Ð ÑÐ¾Ð´Ðµ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ»Ð¸ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ñ Ð¼ÐµÑÐ¾Ð´Ñ Ð¸ ÑÑÐµÐ´ÑÑÐ²Ð° Ð¿ÑÐ¾Ð²ÐµÐ´ÐµÐ½Ð¸Ñ ÑÐ¾ÑÐ¸Ð¾ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ñ Ð°ÑÐ°Ðº. ÐÑÐ»Ð¸ Ð¿ÑÐ¾Ð°Ð½Ð°Ð»Ð¸Ð·Ð¸ÑÐ¾Ð²Ð°Ð½Ñ ÑÐ¾Ð²ÑÐµÐ¼ÐµÐ½Ð½ÑÐµ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ Ð² Ð¾Ð±Ð»Ð°ÑÑÐ¸ Ð¾Ð±Ð½Ð°ÑÑÐ¶ÐµÐ½Ð¸Ñ ÑÐ¾ÑÐ¸Ð¾ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ñ Ð°ÑÐ°Ðº. Ð ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐµ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ»Ð¾ ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½Ð¾ ÑÑÐµÐ´ÑÑÐ²Ð¾ Ð¾Ð±Ð½Ð°ÑÑÐ¶ÐµÐ½Ð¸Ñ ÑÐ¾ÑÐ¸Ð¾ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ñ Ð°ÑÐ°Ðº, Ð±ÑÐ»Ð° Ð¿ÑÐ¾Ð´ÐµÐ¼Ð¾Ð½ÑÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð° ÑÑÑÐµÐºÑÐ¸Ð²Ð½Ð¾ÑÑÑ ÑÑÐµÐ´ÑÑÐ²Ð°. ÐÑÐ» ÑÐ´ÐµÐ»Ð°Ð½ Ð²ÑÐ²Ð¾Ð´, ÑÑÐ¾ Ð¾Ð±Ð½Ð°ÑÑÐ¶ÐµÐ½Ð¸Ðµ ÑÐ¸ÑÐ¸Ð½Ð³Ð¾Ð²ÑÑ Ð°ÑÐ°Ðº ÑÐ²Ð»ÑÐµÑÑÑ ÑÐ»Ð¾Ð¶Ð½Ð¾Ð¹ Ð·Ð°Ð´Ð°ÑÐµÐ¹. ÐÐ¾Ð»ÑÑÐµÐ½Ð½ÑÐµ ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÑ Ð¼Ð¾Ð³ÑÑ Ð±ÑÑÑ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ñ Ð² ÐºÐ°ÑÐµÑÑÐ²Ðµ Ð¾ÑÐ½Ð¾Ð²Ñ Ð´Ð»Ñ Ð¿ÑÐ¾ÐµÐºÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ ÑÐ¸ÑÑÐµÐ¼ Ð·Ð°ÑÐ¸ÑÑ Ð¾Ñ ÑÐ¸ÑÐ¸Ð½Ð³Ð¾Ð²ÑÑ Ð°ÑÐ°Ðº.
description: The purpose of the study is to detect sociotechnical attacks and forged forms of authentication based on heuristic analysis of email messages. The subject of the work is how to detect sociotechnical attacks based on heuristic analysis of messages and forms of authentication. The research set the following goals: 1. analysis of the methods and tools used by attackers in conducting sociotechnical attacks using phishing emails; 2. researching methods and tools for detecting phishing emails and fake authentication forms; 3. development of a method for detecting phishing emails and fake forms of authentication based on heuristic analysis; 4. development of a software tool to detect socio-technical attacks using phishing emails. During the work methods and tools for conducting sociotechnical attacks were studied. Modern studies in the field of detection of socio-technical were analyzed. The work resulted in development of a detection tool for sociotechnical attacks. Tool has satisfactory indicators in not only quantitative attack detection, but also in productivity. The studying point to conclusion that the detection of phishing attacks is a complex task. The results could be used as a basis for designing systems to protect against phishing attacks.