Implementation of a Socially Engineered Worm to Increase Information Security Awareness

Computer users are seen as the weakest link in the computer security chain. These users are deceived into executing malicious code through the utilisation of social engineering tactics combined with for example e-mail technology. Computer users across all levels in companies are subject to these types of security attacks. The problem is to determine which of these users require further training in computer security principles. Within this study we reflect on the implementation results of a socially engineered worm to increase information security awareness. Our prototype stems from a detailed study into the design of socially engineered worms.