期刊名称：Journal of Cybersecurity Education, Research and Practice
印刷版ISSN：2472-2707
出版年度：2020
卷号：2020
期号：2
页码：5-17
出版社：Kennesaw State University
摘要：Social engineering is a large problem in our modern technological world, but while conceptually understood, it is harder to teach compared to traditional pen testing techniques. This research details a class project where students implemented a phishing exercise against real-world targets. Through cooperation with an external corporate partner, students learned the legal, technical, behavioral, analysis, and reporting aspects of social engineering. The outcome provided both usable data for a real-world corporation as well as valuable educational experience for the students.
