Segurança da informação nas redes sociais: um estudo teórico e experimental sobre as redes sociais

Abstract

This work aims to identify existing problems and risks in the most used social networks, simulating an attack involving the technique of sending emails using social engineering tactics to deceive and hijack data from social network users. As for the methodological aspects, the nature of this research is a summary of the subject. As for its objectives, it is an exploratory and descriptive research. In relation to technical procedures, it is a bibliographical and experimental research. The study carried out allowed the identification of the following problems and risks associated with the most used social networks in relation to information security, as follows: attack problems related to Social Engineering, which use methods of phishing, spyware, trojans, baiting and among others. The main risks related to the use of social networks are: identity theft, profile invasion, misuse of information, invasion of privacy, information leakage, provision of confidential information, receiving malicious messages, access to malicious message content, access to inappropriate or offensive content, damage to image and reputation, kidnapping and theft of property. With the results of the implementation carried out in this work, it was possible to conclude that users are the gateway to cybercrimes. Therefore, they need to be made aware and trained, in order to become more observant and know how to act when receiving the attackers' scenarios on social networks.