Assessing Human Vulnerabilities and Social Engineering Threats in Web-Based School Management Systems for Junior Secondary Schools in the Federal Capital Territory

Abstract

The adoption of Web-Based School Management Systems in FCT UBEB Junior Secondary Schools has greatly improved administrative efficiency. However, their implementation has also revealed cybersecurity vulnerabilities, especially social engineering. Social engineering weakens technical security measures by manipulating human psychology. This paper explores human-related vulnerabilities that increase social engineering risks in SMS Web-Based Management Systems in schools. It addresses issues like low cybersecurity awareness, weak passwords, and susceptibility to phishing. These vulnerabilities and existing security measures are analyzed through surveys, interviews, and system audits. Results indicate that over 70% of students and staff are unable to recognize phishing emails, and password reuse is a common practice. Additional risks include limited use of multi-factor authentication and outdated antivirus software. Social engineering attacks can lead to data breaches, financial losses, and damage to the institution’s reputation and operational stability. Consequently, the study proposes a Human-Centric Social Engineering Mitigation Framework (HC-SEMF) that integrates user awareness training, behavioral analysis, and technical security controls to enhance the resilience of Web-Based School Management Systems in junior secondary schools.