A Study of Social Engineering Based Attacks in Kathmandu University to Propose a Conceptual Framework

Social engineering is a major issue affecting organizational security throughout the world. Educating the employees of every organization about social engineering attacks and the negative effects it brings to their organization is a very important step to be taken by every organization but is overlooked most of the times. The objective of this research is to evaluate the current awareness level of staffs of Kathmandu University towards very common social engineering attacks and propose a conceptual framework for prevention of these attacks. A questionnaire was created and a survey was conducted accordingly within teaching and non-teaching staffs of Kathmandu University. Based on the 51 responses achieved, the paper proposes a conceptual framework for the university to adapt to their information system for a more secure environment.