Detecting Asks in Social Engineering Attacks: Impact of Linguistic and Structural Knowledge

Abstract

Social engineers attempt to manipulate users into undertaking actions such as downloading malware by clicking links or providing access to money or sensitive information. Natural language processing, computational sociolinguistics, and media-specific structural clues provide a means for detecting both the ask (e.g., buy gift card) and the risk/reward implied by the ask, which we call framing (e.g., lose your job, get a raise). We apply linguistic resources such as Lexical Conceptual Structure to tackle ask detection and also leverage structural clues such as links and their proximity to identified asks to improve confidence in our results. Our experiments indicate that the performance of ask detection, framing detection, and identification of the top ask is improved by linguistically motivated classes coupled with structural clues such as links. Our approach is implemented in a system that informs users about social engineering risk situations.

Cite

Text

Dorr et al. "Detecting Asks in Social Engineering Attacks: Impact of Linguistic and Structural Knowledge." AAAI Conference on Artificial Intelligence, 2020. doi:10.1609/AAAI.V34I05.6269

Markdown

[Dorr et al. "Detecting Asks in Social Engineering Attacks: Impact of Linguistic and Structural Knowledge." AAAI Conference on Artificial Intelligence, 2020.](https://mlanthology.org/aaai/2020/dorr2020aaai-detecting/) doi:10.1609/AAAI.V34I05.6269

BibTeX

@inproceedings{dorr2020aaai-detecting,
  title     = {{Detecting Asks in Social Engineering Attacks: Impact of Linguistic and Structural Knowledge}},
  author    = {Dorr, Bonnie J. and Bhatia, Archna and Dalton, Adam and Mather, Brodie and Hebenstreit, Bryanna and Santhanam, Sashank and Cheng, Zhuo and Shaikh, Samira and Zemel, Alan and Strzalkowski, Tomek},
  booktitle = {AAAI Conference on Artificial Intelligence},
  year      = {2020},
  pages     = {7675-7682},
  doi       = {10.1609/AAAI.V34I05.6269},
  url       = {https://mlanthology.org/aaai/2020/dorr2020aaai-detecting/}
}