# Insights into Organizational Security Readiness: Lessons Learned from Cyber-Attack Case Studies
## 7 Conclusions and Open Challenges
* [24] [PERSON] Ubiquity Networks Victim of $39 Million Social Engineering Attack. August 2015. CSO from IDG. Available online: [[http://www.csoonline.com/article/2961066/supply-chain-security/ubiquit-networks-victim-of-39-million-social-en](http://www.csoonline.com/article/2961066/supply-chain-security/ubiquit-networks-victim-of-39-million-social-en)]([http://www.csoonline.com/article/2961066/supply-chain-security/ubiquit-networks-victim-of-39-million-social-en](http://www.csoonline.com/article/2961066/supply-chain-security/ubiquit-networks-victim-of-39-million-social-en)) gineering-attack.html (accessed on 19 February 2021).
* [25] [PERSON] _Which Disney Princess are YOU? 2010: (Web 2.0) Social Engineering in Social Networks;_ The SANS Institute: Bethesda, MD, USA, 2010.
* [26] [PERSON] _Social Engineering Your Employees to Information Security;_ SANS Institute InfoSec Reading Room, The SANS Institute: Bethesda, MD, USA, 2006.
* [27] [PERSON] Cyberattackers Target 19,000 French Websites in Wake of Charlie Hebdo. _The Wall Street Journal_, 15 January 2015. Available online: [[http://blogs.wsj.com/cio/2015/01/15/cyberattackers-target-19000-french-websites-in-wake-of-charlie-hebdo/](http://blogs.wsj.com/cio/2015/01/15/cyberattackers-target-19000-french-websites-in-wake-of-charlie-hebdo/)]([http://blogs.wsj.com/cio/2015/01/15/cyberattackers-target-19000-french-websites-in-wake-of-charlie-hebdo/](http://blogs.wsj.com/cio/2015/01/15/cyberattackers-target-19000-french-websites-in-wake-of-charlie-hebdo/)) (accessed on 23 October 2021).
* [28] [PERSON] _The Human Factor in Phishing;_ School of Informatics, Indiana University at Bloomington: Bloomington, IN, USA, 2007. Available online: [[https://www.usenix.org/legacy/event/sec07/tech/jakobsson.pdf](https://www.usenix.org/legacy/event/sec07/tech/jakobsson.pdf)]([https://www.usenix.org/legacy/event/sec07/tech/jakobsson.pdf](https://www.usenix.org/legacy/event/sec07/tech/jakobsson.pdf)) (accessed on 21 December 2020).
* [29] [PERSON] Was this the email that took down RSA? A Spear Phishing Email That Has Surfaced in a Security Database Looks Like It may Have Been the One to Hit RSA. _IDG News Service_, 26 August 2011. Available online: [[http://www.networkworld.com/article/2180520/malware-cypercrime/was-this-the-email-that-took-down-rsa-.html](http://www.networkworld.com/article/2180520/malware-cypercrime/was-this-the-email-that-took-down-rsa-.html)]([http://www.networkworld.com/article/2180520/malware-cypercrime/was-this-the-email-that-took-down-rsa-.html](http://www.networkworld.com/article/2180520/malware-cypercrime/was-this-the-email-that-took-down-rsa-.html)) (accessed on 23 October 2021).
* [30] [PERSON] How Not to Be Sony Pictures. _IEEE Spectrum_, 11 December 2014. Available online: [[http://spectrum.ieee.org/risk](http://spectrum.ieee.org/risk)]([http://spectrum.ieee.org/risk](http://spectrum.ieee.org/risk)) factor/telecom/security/how-not-to-be-sony-pictures (accessed on 29 July 2018).
* [31] [PERSON]. [PERSON]'s Says Data Breach Affected 33 Locations. _The Wall Street Journal_, 4 August 2014; Tech 1-3. Available online: [[http://www.wsj.com/articles/p-f-changes-says-data-breach-affected-33-locations-1407159131](http://www.wsj.com/articles/p-f-changes-says-data-breach-affected-33-locations-1407159131)]([http://www.wsj.com/articles/p-f-changes-says-data-breach-affected-33-locations-1407159131](http://www.wsj.com/articles/p-f-changes-says-data-breach-affected-33-locations-1407159131)) (accessed on 23 October 2021).
* [32] [PERSON] [PERSON] Epsilon Fell to Spear-Phishing Attack. Information Week. 2011. Available online: [[http://www.darkreading.com/attacks-and-breaches/epsilon-fell-to-spear-phishing-attack/d/d-id/1097119?](http://www.darkreading.com/attacks-and-breaches/epsilon-fell-to-spear-phishing-attack/d/d-id/1097119?)]([http://www.darkreading.com/attacks-and-breaches/epsilon-fell-to-spear-phishing-attack/d/d-id/1097119?](http://www.darkreading.com/attacks-and-breaches/epsilon-fell-to-spear-phishing-attack/d/d-id/1097119?)) (accessed on 20 March 2019).
* [33] [PERSON] Exclusive: New Thesis on How Stuxnet Infiltrated Iran Nuclear Facility. 25 February 2014. The Christian Science Monitor. Available online: [[http://www.csmonitor.com/World/Security-Watch/2014/0225/Exclusive-New-thesis-on-how-S](http://www.csmonitor.com/World/Security-Watch/2014/0225/Exclusive-New-thesis-on-how-S)]([http://www.csmonitor.com/World/Security-Watch/2014/0225/Exclusive-New-thesis-on-how-S](http://www.csmonitor.com/World/Security-Watch/2014/0225/Exclusive-New-thesis-on-how-S)) tuxnet-infiltrated-Iran-nuclear-facility (accessed on 23 October 2021).
* [34] [PERSON]; [PERSON] _Detecting APT Activity with Network Traffic Analysis;_ Trend Micro Incorporated. Research Paper; Trend Micro: Tokyo, Japan, 2012.
* [35] [PERSON] International Diary Queen Confirms Data Breach. _The Wall Street Journal_, 9 October 2014; pp. 7-9. Available online: [[http://www.wsj.com/articles/international-dairy-queen-confirms-data-breach-1412891919](http://www.wsj.com/articles/international-dairy-queen-confirms-data-breach-1412891919)]([http://www.wsj.com/articles/international-dairy-queen-confirms-data-breach-1412891919](http://www.wsj.com/articles/international-dairy-queen-confirms-data-breach-1412891919)) (accessed on 12 June 2019).
* [36] Reuters. Cyber attack could cost Sony studio as much as $100 million.