Developing and testing a model against social engineering in cyber security

While developing technology of today, scientific studies, developed systems and increasing access opportunities to these systems have made lives of people easier; they also have brought many dangers with them. Since the concept of cyber security is an abstract expression, people who are the weakest link in the field of cyber security have difficulty understanding and applying this concept. Considering this situation, companies, institutions and organizations have allocated large budgets both in order to take high security measures in management areas and not to stay behind the time. Institutions and organizations throughout our country have taken the necessary precautions regarding cyber security and informed their employees in this direction. Recently, many organizations have collected information of their users and tested their vulnerabilities with Social Engineering applications. In this research, social engineering attacks were carried out against employees. Based on the findings of the research, a new filter model has been developed that will guide the user in a practical way, reinforce the cyber security training it received, and make the right decision at the time of a possible cyber attack. The model developed filters from general to specific. What the general means is the measures that the public institution should take, while the specific refers to the precautions that the users working in the public sector should take. At the end of the study, the model is tested with social engineering attack scenarios. As a result, it is considered that the developed model will increase cyber security awareness and will provide positive contributions as a supportive factor in addition to the trainings that are received by spending large budgets but cannot achieve the desired success. When the results are examined, it is clear that the users need more awareness and consciousness about cyber security.