September 2026 (published: 15.09.2026)
Number 3(66)
UDC 331.363
DOI 10.17586/2310-1172-2026-19-3-98-107
Organizational aspects of countering attacks based on social engineering
Reference for citation: Gavrishev A.A. Organizational aspects of countering attacks based on social engineering. Scientific journal NRU ITMO. Series «Economics and Environmental Management». 2026. № 3. Р. 98-107. DOI: 10.17586/2310-1172-2026-19-3-98-107.
Abstract. In this work, the organizational aspects of countering attacks based on social engineering (SE) have been improved to protect the company's personnel from it. It is shown that attacks based on SE are one of the most effective tools for cyber attacks against information systems and digital infrastructure of enterprises, using the psychological characteristics of people. It was emphasized that the human factor has now begun to play a much more significant role in ensuring information security than before. Statistical and literary data demonstrate that attacks based on SE are successful due to their ability to bypass traditional, mostly technical, defense systems. Based on the literature analysis, individual approaches and techniques underlying such attacks have been described. Taking into account the obtained data and literary sources, a simplified algorithm of actions of an attacker during an attack based on SE is proposed. It is emphasized that among the many measures used to ensure the information security of enterprises of any form of ownership, organizational measures occupy a special place, acting as the "core" of the overall information security system, linking legal and technical measures. It is indicated that such measures, first of all, should be aimed at regulating the functioning of security facilities and the activities of officials in order to ensure information security through the development of certain rules and requirements. It is noted that organizational measures should be the first "barrier" against attacks based on SE. Based on an understanding of the basic mechanisms of SE attacks, taking into account the results from individual studies, practical organizational measures are proposed to protect the company's personnel from it. The practical significance of the presented results lies in the fact that they can be useful to managers of enterprises of any form of ownership and information security specialists to counter SE attacks, helping to improve the organizational aspects of countering such attacks to protect enterprise personnel from them.
Read the full article
Keywords: personnel, enterprise, social engineering, information security, organizational measures.
References:
1. Safronova Zh.S., Brazevich D.S., Brazevich S.S., Vasilenok V.L. Social`no-e`konomicheskie determinanty` i riski distancionnoj raboty` v usloviyax cifrovoj transformacii // Nauchny`j zhurnal NIU ITMO. Seriya «E`konomika i e`kologicheskij menedzhment». 2026. № 1. S. 116-128. DOI: 10.17586/2310-1172-2026-19-1-116-128.
2. Mel`nikov A.I. Social`naya inzheneriya v cifrovoj e`poxe: analiz metodov manipulyacii chelovecheskim faktorom v celyax kiberatak // Social`no-gumanitarny`e znaniya. 2024, № 1. S. 50-54.
3. Mixalyova U.A. Preteksting i sposoby` protivodejstviya emu // Vestnik Dagestanskogo gosudarstvennogo texnicheskogo universiteta. Texnicheskie nauki. 2023. № 2. S. 109-116. DOI: 10.21822/2073-6185-2023-50-2-109-116.
4. Kyuner A.P., Chechulin A.A. Obzor nauchny`x rabot po social`noj inzhenerii // Vestnik Sankt-Peterburgskogo universiteta Gosudarstvennoj protivopozharnoj sluzhby` MChS Rossii. 2025. № 4. S. 94–106. DOI: 10.61260/2218-130X-2025-4-94-106.
5. By`levskij P.G. Fenomenologiya kul`tury` informacionnoj bezopasnosti. M.: MGLU, 2024. 240 s.
6. Genne O.V. Zametki o social`noj inzhenerii // Zashhita informacii. INSIDE. 2006. № 6. S. 16-19.
7. Social`naya inzheneriya [E`lektronny`j resurs]. URL: https://www.sberbank.ru/ru/person/kibrary/vocabulary/socialnaya_inzheneriya (data obrashheniya: 06.07.2026).
8. Skabczov N. Audit bezopasnosti informacionny`x sistem. SPb.: Piter, 2018. 272 s.
9. Xalilaeva E`.I., Maslova M.A., Gerasimov V.M. Sistema protivodejstviya metodam social`noj inzhenerii v oblasti informacionnoj bezopasnosti // Vestnik UrFO. 2023. № 2. S. 54–61. DOI: 10.14529/secur230205
10. Metel`kov A.N. Ponyatie informacionnoj sistemy`: texnicheskie i normativno-pravovy`e aspekty` // Pravovaya informatika. 2025. № 2. S. 112–118.
11. Kotlyar E.O., Meshheryakov M.O., Bugaev K.G. Metody` social`noj inzhenerii kak instrument xishheniya konfidencial`ny`x danny`x pol`zovatelej // Oxrana, bezopasnost`, svyaz`. 2021. № 6-2. S. 223-230.
12. Zorin V.A. Informacionnaya bezopasnost` i nejrobiologiya social`noj inzhenerii: kognitivny`e iskazheniya, e`mpatiya // Informaciya i bezopasnost`. 2024. № 3. S. 441-448. DOI: 10.36622/1682-7813.2024.27.3.008.
13. Chto takoe social`naya inzheneriya? [E`lektronny`j resurs]. URL: https://www.kaspersky.ru/resource-center/definitions/what-is-social-engineering (data obrashheniya: 06.07.2026).
14. Bondarenko D.A., Bur`kova E.V. Analiz e`ffektivnosti metodov social`noj inzhenerii v fishinge i mery` zashhity` ot nego // Materialy` XII Vseros. konf. «Komp`yuternaya integraciya proizvodstva i IPI-texnologii». Orenburg: OGU, 2025. S. 89-93.
15. Zavodcev I.V. i dr. Metody` zashhity` informacionny`x sistem ot komp`yuterny`x atak, osushhestvlyaemy`x s ispol`zovaniem social`noj inzhenerii (SI-Atak) // Informacionny`e vojny`. 2017. №2 (42). S. 82-86.
16. Xorev A.A. Celi i zadachi zashhity` informacii // Radioe`lektronny`e ustrojstva i sistemy` dlya infokommunikacionny`x texnologij («RE`US-IT 2025»): Doklady` Vserossijskoj konferencii, posvyashhyonnoj «Dnyu radio». M.: Rossijskoe nauchno-texnicheskoe obshhestvo radiotexniki, e`lektroniki i svyazi im. A.S. Popova, 2025. S. 275-279.
17. Russkij yazy`k kak gosudarstvenny`j [E`lektronny`j resurs]. URL: https://rus-gos.spbu.ru/index.php/words/show/1103 (data obrashheniya: 06.07.2026).
18. Gavrishev A.A. Issledovanie otdel`ny`x voprosov upravleniya kadrami po informacionnoj bezopasnosti v medicinskix uchrezhdeniyax // Nauchny`j zhurnal NIU ITMO. Seriya: E`konomika i e`kologicheskij menedzhment.2024. № 1. S. 31-41. DOI: 10.17586/2310-1172-2024-17-1-31-41.
19. Gavrishev A.A. Issledovanie ry`nka truda v segmente informacionnoj bezopasnosti dlya uchrezhdenij zdravooxraneniya // Teoreticheskaya i prikladnaya e`konomika. 2025. № 1. S. 76-88. DOI: 10.25136/2409-8647.2025.1.71839.
20. Gavrishev A.A. Normativnoe regulirovanie deyatel`nosti upravlencheskix kadrov po informacionnoj bezopasnosti v sfere zdravooxraneniya // Territoriya novy`x vozmozhnostej. Vestnik Vladivostokskogo gosudarstvennogo universiteta. 2025. T. 17. № 3. S. 95-105. DOI: 10.63973/2949-1258/2025-3/095-105.
21. Gavrishev A.A. Sostoyanie ry`nka truda v segmente upravlencheskix kadrov po informacionnoj bezopasnosti uchrezhdenij zdravooxraneniya // Nauchny`j zhurnal NIU ITMO. Seriya: E`konomika i e`kologicheskij menedzhment. 2025. № 1. S. 123-133. DOI: 10.17586/2310-1172-2025-18-1-123-133.
22. Glamazda A.V., Shevchenko D.A. Menedzhment kompanii v usloviyax sankcionnogo davleniya i konfrontacii // Nauchny`j zhurnal NIU ITMO. Seriya «E`konomika i e`kologicheskij menedzhment». 2026. № 1. S. 61-70. DOI: 10.17586/2310-1172-2026-19-1-61-70.
