Real or bogus: Predicting susceptibility to phishing with economic experiments.
Ontology highlight
ABSTRACT:
SUBMITTER: Chen Y
PROVIDER: S-EPMC6021067 | biostudies-literature | 2018
REPOSITORIES: biostudies-literature
Publications
Real or bogus: Predicting susceptibility to phishing with economic experiments.
Chen Yan Y YeckehZaare Iman I Zhang Ark Fangzhou AF
PloS one 20180627 6
We present a lab-in-the-field experiment to demonstrate how individual behavior in the lab predicts their ability to identify phishing attempts. Using the business and finance staff members from a large public university in the U.S., we find that participants who are intolerant of risk, more curious, and less trusting commit significantly more errors when evaluating interfaces. We also replicate prior results on demographic correlates of phishing vulnerability, including age, gender, and educati ...[more]
Similar Datasets
Project description:BACKGROUND:Phishing is a cybercrime in which the attackers usually impersonate a trusted source. The attackers usually send an email that contains a link that allows them to steal the receiver's personal information. In the United States, phishing is the number one cybercrime by victim count according to the Federal Bureau of Investigation's 2019 internet crime report. Several studies investigated ways to increase awareness and improve employees' resistance to phishing attacks. However, in 2019, successful phishing attacks continued to rise at a high rate. OBJECTIVE:The objective of this study was to investigate the influence of personality-based antecedents on phishing susceptibility in a health care context. METHODS:Survey data were collected from participants through Amazon Mechanical Turk to test a proposed conceptual model using structural equation modeling. RESULTS:A total of 200 participants took part. Health concerns, disposition to trust, and risk-taking propensity yielded higher phishing susceptibility. This highlights the important of personality-based factors in phishing attacks. In addition, females had a higher phishing susceptibility than male participants. CONCLUSIONS:While previous studies used health concerns as a motivator for contexts such as sharing personal health records with providers, this study shed light on the danger of higher health concerns in enabling the number one cybercrime.
| S-EPMC7235804 | biostudies-literature
Project description:Today, the traditional approach used to conduct phishing attacks through email and spoofed websites has evolved to include social network sites (SNSs). This is because phishers are able to use similar methods to entice social network users to click on malicious links masquerading as fake news, controversial videos and other opportunities thought to be attractive or beneficial to the victim. SNSs are a phisher's "market" as they offer phishers a wide range of targets and take advantage of opportunities that exploit the behavioural vulnerabilities of their users. As such, it is important to further investigate aspects affecting behaviour when users are presented with phishing. Based on the literature studied, this research presents a theoretical model to address phishing susceptibility on SNSs. Using data collected from 215 respondents, the study examined the mediating role that information processing plays with regard to user susceptibility to social network phishing based on their personality traits, thereby identifying user characteristics that may be more susceptible than others to phishing on SNSs. The results from the structural equation modeling (SEM) analysis revealed that conscientious users were found to have a negative influence on heuristic processing, and are thus less susceptible to phishing on SNSs. The study also confirmed that heuristic processing increases susceptibility to phishing, thus supporting prior studies in this area. This research contributes to the information security discipline as it is one of the first to examine the effect of the relationship between the Big Five personality model and the heuristic-systematic model of information processing.
| S-EPMC7252086 | biostudies-literature
Project description:ImportanceCybersecurity is an increasingly important threat to health care delivery, and email phishing is a major attack vector against hospital employees.ObjectiveTo describe the practice of phishing simulation and the extent to which health care employees are vulnerable to phishing simulations.Design, setting, and participantsRetrospective, multicenter quality improvement study of a convenience sample of 6 geographically dispersed US health care institutions that ran phishing simulations from August 1, 2011, through April 10, 2018. The specific institutions are anonymized herein for security and privacy concerns.ExposuresSimulated phishing emails received by employees at US health care institutions.Main outcomes and measuresDate of phishing campaign, campaign number, number of emails sent, number of emails clicked, and email content. Emails were classified into 3 categories (office related, personal, or information technology related).ResultsThe final study sample included 6 anonymized US health care institutions, 95 simulated phishing campaigns, and 2 971 945 emails, 422 062 of which were clicked (14.2%). The median institutional click rates for campaigns ranged from 7.4% (interquartile range [IQR], 5.8%-9.6%) to 30.7% (IQR, 25.2%-34.4%), with an overall median click rate of 16.7% (IQR, 8.3%-24.2%) across all campaigns and institutions. In the regression model, repeated phishing campaigns were associated with decreased odds of clicking on a subsequent phishing email (adjusted OR, 0.511; 95% CI, 0.382-0.685 for 6-10 campaigns; adjusted OR, 0.335; 95% CI, 0.282-0.398 for >10 campaigns).Conclusions and relevanceAmong a sample of US health care institutions that sent phishing simulations, almost 1 in 7 simulated emails sent were clicked on by employees. Increasing campaigns were associated with decreased odds of clicking on a phishing email, suggesting a potential benefit of phishing simulation and awareness. With cyberattacks increasing against US health care systems, these click rates represent a major cybersecurity risk for hospitals.
| S-EPMC6484661 | biostudies-literature
Project description:Blackspot bruising is the tuber discoloration resulting from mechanical damage in susceptible crops and is a major quality and environmental problem for the potato industry. The present study is aimed at identifying differences in gene expression which are correlated with the development of bruise susceptibility or resistance in tubers. This may produce markers or diagnostic tests for use in predicting enhanced bruise susceptibility in field grown potato crops. Different potato cultivars were grown in field plots at ADAS Gleadthorpe, Nottinghamshire, UK during three growing seasons – 2003, 2004 and 2005. Random samples of tubers (8) were harvested by hand and cores excised from the subdermal tissues of the stolon end of the tubers and immediately frozen and stored in liquid nitrogen for RNA isolations. The remainder of the crops were stored at 4oC for bruise susceptibility testing - samples of tubers (30) from each crop were impacted and incubated for 48h at 30oC. Bruise susceptibility was scored, according to the intensity of pigmentation and the volume of tuber tissue affected, on a scale of 0 (very resistant) – 10 (very susceptible). Crops representing 'very susceptible', 'susceptible', 'moderate' and 'resistant' to bruising, were selected for RNA isolation. Total RNA’s were isolated from frozen cores by the TIGR hot phenol extraction method, precipitated by LiCl and treated with DNase. RNA concentrations were adjusted to ~2ug/ul and analysed on 1% TBE gels after formamide treatment. Any RNA’s which were not pure enough or showed degradation were discarded. Total RNA’s were pooled and 25ul samples aliquotted according to the required hybridisations indicated in the Excel spreadsheet and the on-line information form. Keywords: Direct comparison 32 hybs total
2007-09-01 | E-GEOD-8274 | biostudies-arrayexpress
Project description:Phishing email is one of the biggest risks to online information security due to its ability to exploit human trust and naivety. Prior research has examined whether some people are more susceptible to phishing than others and what characteristics may predict this susceptibility. Given that there are no standardised measures or methodologies to detect phishing susceptibility, results have conflicted. To address this issue, the current study created a 40-item phishing detection task to measure both cognitive and behavioural indicators of phishing susceptibility and false positives (misjudged genuine email). The task is based on current real-life email stimuli (i.e., phishing and genuine) relevant to the student and general population. Extending previous literature we also designed a methodology for assessing phishing susceptibility by allowing participants to indicate perception of maliciousness of each email type and the actions they would take (keep it, trash it or seek further information). This enabled us to: (1) examine the relationships that psychological variables share with phishing susceptibility and false positives-both captured as consistent tendencies; (2) determine the relationships between perceptions of maliciousness with behavioural outcomes and psychological variables; and (3) determine the relationships between these tendencies and email characteristics. In our study, 150 undergraduate psychology students participated in exchange for partial course credit (98 Females; Mean age = 19.70, SD = 2.27). Participants also completed a comprehensive battery of psychometric tests assessing intelligence, pre- and on-task confidence, Big 6 personality, and familiarity/competence in computing and phishing. Results revealed that people showed distinct and robust tendencies for phishing susceptibility and false positives. A series of regression analyses looking at the accuracy of both phishing and false positives detection revealed that human-centred variables accounted for a good degree of variance in phishing susceptibility (about 54%), with perceptions of maliciousness, intelligence, knowledge of phishing, and on-task confidence contributing significantly, directly and/or indirectly via perception of maliciousness. A regression model looking at discriminating false positives has also shown that human-centred variables accounted for a reasonable degree of variance (41%), with perceptions of maliciousness, intelligence and on-task confidence contributing significantly, directly and/or indirectly via perception of maliciousness. Furthermore, the characteristics of the most effective phishing and misjudged genuine email items were profiled. Based on our findings, we suggest that future research should investigate these significant variables in more detail. We also recommend that future research should capture consistent response tendencies to determine vulnerability to phishing and false positives (rather than a one off response to a single email), and use the collection of the most current phishing email obtained from relevant sources to the population. It is important to capture perceptions of maliciousness of email because it is a key predictor of the action taken on the email. It directly predicts accuracy detection of phishing and genuine email, as well as mediating the relationships between some other predictors whose role would have been overlooked if the perceptions were not captured. The study provides the framework of human-centred variables which predict phishing and false positive susceptibility as well as the characteristics of email which most deceive people.
| S-EPMC6203253 | biostudies-literature
Project description:Phishing stands for a fraudulent process, where an attacker tries to obtain sensitive information from the victim. Usually, these kinds of attacks are done via emails, text messages, or websites. Phishing websites, which are nowadays in a considerable rise, have the same look as legitimate sites. However, their backend is designed to collect sensitive information that is inputted by the victim. Discovering and detecting phishing websites has recently also gained the machine learning community's attention, which has built the models and performed classifications of phishing websites. This paper presents two dataset variations that consist of 58,645 and 88,647 websites labeled as legitimate or phishing and allow the researchers to train their classification models, build phishing detection systems, and mining association rules.
| S-EPMC7642806 | biostudies-literature
Project description:Blackspot bruising is the tuber discoloration resulting from mechanical damage in susceptible crops and is a major quality and environmental problem for the potato industry. The present study is aimed at identifying differences in gene expression which are correlated with the development of bruise susceptibility or resistance in tubers. This may produce markers or diagnostic tests for use in predicting enhanced bruise susceptibility in field grown potato crops. Different potato cultivars were grown in field plots at ADAS Gleadthorpe, Nottinghamshire, UK during three growing seasons – 2003, 2004 and 2005. Random samples of tubers (8) were harvested by hand and cores excised from the subdermal tissues of the stolon end of the tubers and immediately frozen and stored in liquid nitrogen for RNA isolations. The remainder of the crops were stored at 4oC for bruise susceptibility testing - samples of tubers (30) from each crop were impacted and incubated for 48h at 30oC. Bruise susceptibility was scored, according to the intensity of pigmentation and the volume of tuber tissue affected, on a scale of 0 (very resistant) – 10 (very susceptible). Crops representing 'very susceptible', 'susceptible', 'moderate' and 'resistant' to bruising, were selected for RNA isolation. Total RNA’s were isolated from frozen cores by the TIGR hot phenol extraction method, precipitated by LiCl and treated with DNase. RNA concentrations were adjusted to ~2ug/ul and analysed on 1% TBE gels after formamide treatment. Any RNA’s which were not pure enough or showed degradation were discarded. Total RNA’s were pooled and 25ul samples aliquotted according to the required hybridisations indicated in the Excel spreadsheet and the on-line information form. Keywords: Direct comparison
2007-09-01 | GSE8274 | GEO
Project description:Internationally, policy makers are increasingly focussed on reducing the detrimental consequences and rising costs associated with unhealthy diets, inactivity, smoking, alcohol and other risk factors on the health of their populations. This has led to an increase in the demand for evidence-based, cost-effective Population Health Interventions (PHIs) to reverse this trend. Given that research designs such as randomised controlled trials (RCTs) are often not suited to the evaluation of PHIs, Natural Experiments (NEs) are now frequently being used as a design to evaluate such complex, preventive PHIs. However, current guidance for economic evaluation focusses on RCT designs and therefore does not address the specific challenges of NE designs. Using such guidance can lead to sub-optimal design, data collection and analysis for NEs, leading to bias in the estimated effectiveness and cost-effectiveness of the PHI. As a consequence, there is a growing recognition of the need to identify a robust methodological framework for the design and conducting of economic evaluations alongside such NEs. This paper outlines the challenges inherent to the design and conduct of economic evaluations of PHIs alongside NEs, providing a comprehensive framework and outlining a research agenda in this area.
| S-EPMC6323352 | biostudies-literature
Project description:We measure how accurately replication of experimental results can be predicted by black-box statistical models. With data from four large-scale replication projects in experimental psychology and economics, and techniques from machine learning, we train predictive models and study which variables drive predictable replication. The models predicts binary replication with a cross-validated accuracy rate of 70% (AUC of 0.77) and estimates of relative effect sizes with a Spearman ? of 0.38. The accuracy level is similar to market-aggregated beliefs of peer scientists [1, 2]. The predictive power is validated in a pre-registered out of sample test of the outcome of [3], where 71% (AUC of 0.73) of replications are predicted correctly and effect size correlations amount to ? = 0.25. Basic features such as the sample and effect sizes in original papers, and whether reported effects are single-variable main effects or two-variable interactions, are predictive of successful replication. The models presented in this paper are simple tools to produce cheap, prognostic replicability metrics. These models could be useful in institutionalizing the process of evaluation of new findings and guiding resources to those direct replications that are likely to be most informative.
| S-EPMC6894796 | biostudies-literature
Project description:We demonstrate the possibility of conducting synchronous, repeated, multi-game economic decision-making experiments with hundreds of subjects in-person or remotely with live streaming using entirely mobile platforms. Our experiment provides important proof-of-concept that such experiments are not only possible, but yield recognizable results as well as new insights, blurring the line between laboratory and field experiments. Specifically, our findings from 8 different experimental economics games and tasks replicate existing results from traditional laboratory experiments despite the fact that subjects play those games/task in a specific order and regardless of whether the experiment was conducted in person or remotely. We further leverage our large subject population to study the effect of large (N = 100) versus small (N = 10) group sizes on behavior in three of the scalable games that we study. While our results are largely consistent with existing findings for small groups, increases in group size are shown to matter for the robustness of those findings.
| S-EPMC8084158 | biostudies-literature