Where did they go right? understanding the deception in phishing communications

Group Decision and Negotiation

Volumn 19, Issue 4, 2010, Pages 391-416

  Wright, Ryan ^a   Chakraborty, Suranjan ^b   Basoglu, Asli ^c   Marett, Kent ^d  

^a UNIVERSITY OF SAN FRANCISCO   (United States)

^b TOWSON UNIVERSITY   (United States)

^c WASHINGTON STATE UNIVERSITY   (United States)

^d MISSISSIPPI STATE UNIVERSITY   (United States)

Author keywords

Deception detection; Interpersonal deception theory; Online deception; Phishing

Indexed keywords

EID: 77953540367     PISSN: 09262644     EISSN: 15729907     Source Type: Journal    
DOI: 10.1007/s10726-009-9167-9     Document Type: Article

References (36)

1. Anti-Phishing Working Group (2006) Phishing Activity Trends Report. Anti-Phishing Working Group, www. antiphishing. org(30 Jan 2006).
2. Buller D, Burgoon JK (1996) Interpersonal deception theory. Commun Theory 6(3): 203-242.
3. Cheng P, Holoyoak K (1985) Pragmatic reasoning schemas. Cogn Psychol 17: 391-416.
4. Chin WW (1998) Issues and opinion on structural equation modeling. Manag Inform Syst Q 22(1): vii-xvi.
5. Compeau DR, Higgins CA (1995) Application of social cognitive theory to training for computer skills. Inform Syst Res 6(2): 118-143.
6. Dhamija R, Tygar JD, Hearst M (2006) Why Phishing Works. Computer human interaction conference Montreal, QB, Canada, 2006, pp 581-90.
7. Dinev T, Hart P (2006) Internet privacy concerns and social awareness as determinants of intention to transact. Int J Elec Comm 10(2): 7-29.
8. Ekman P (1992) Telling lies: clues to deceit in the marketplace, politics and marriage. W. W. Norton and Company, New York, NY.
9. Emm D (2006) Phishing update, and how to avoid getting hooked. Netw Sec 8: 13-15.
10. Everard A, Galletta DF (2006) How presentation flaws affect perceived site quality, trust, and intention to purchase from an online store. J Manag Inform Syst 22(3): 55-96.
11. Fornell C, Larcker DF (1981) Evaluating structural equations models with unobservable variables and measurement error. J Mark Res 18(1): 39-50.
12. Gefen D, Straub D, Boudreau M (2000) Structural equation modeling and regression: guidelines for research practice. Commun Assoc Inform Syst 4(7): 1-77.
13. George JF, Carlson JR (1999) Group support systems and deceptive communications. 32nd Hawaii international conference on system science, Hawaii, 1999, pp 1-10.
14. Gosling SD, Rentfrow PJ, Swann WB Jr (2003) A very brief measure of the big five personality domains. J Res Pers 37: 504-528.
15. Grazioli S (2004) Where did they go wrong? An analysis of the failure of knowledgeable internet consumers to detect deception over the internet. Gr Dec Negot 13: 149-172.
16. Grazioli S, Jarvenpaa S (2000) Perils of internet fraud: an empirical investigation of deception and trust with experienced internet consumers. IEEE Transac Syst Man Cybern 30(4): 395-410.
17. Grazioli S, Jarvenpaa S (2003) Decieved: under target online. Commun ACM 46(12): 196-205.
18. Hyman R (1989) The psychology of deception. Ann Rev Psychol 40: 133-154.
19. Jagatic TN, Johnson NA, Jakobsson M, Menczer F (2007) Social phishing. Commun ACM 50(10): 94-100.
20. Jarvenpaa SL, Tractinsky N, Saarinen L (2000) Consumer trust in an Internet store: a cross-cultural validation. J Comp Med Commun 5(2).
21. Jessup L, Valacich J (2005) Information systems today, 2nd edn. Pearson Prentice Hall, Upper Saddle River, NJ.
22. Johnson P, Grazioli S, Jamal K (1993) Fraud detection: intentionality and deception in cognition. Accoun Organ Soc 18(5): 467-488.
23. Johnson PE, Grazioli S, Jamal K, Berryman RG (2001) Detecting deception: adversarial problem solving in a low base-rate world. Cogn Sci 25: 355-392.
24. Kline T (2005) Psychological testing: a practical approach to design and evaluation, 1st edn. Sage Publications, London.
25. Liu W, Deng X, Huang G, Fu AY (2006) An antiphishing strategy based on visual similarity assessment. IEEE Internet Comput 10(2): 58-65.
26. Malhotra NK, Kim SS, Agarwal J (2004) Internet users' information privacy concerns (IUIPC): the construct, the scale, and a causal model. Inform Syst Res 15(4): 336-355.
27. McKnight DH, Kacmar C, Choudhury V (2003) Whoops-did i use the wrong construct to predict e-commerce trust? Modeling the risk-related effects of trust versus distrust concepts. Proceeding of the thirty-sixth Hawaii international conference on social systems, 2003.
28. Miller GR, Stiff JB (1993) Deceptive communication. Sage Publications, London.
29. Mitnick KD, Simon W (2005) The art of intrusion. Wiley Publishing, Inc., Indianapolis, ID.
30. Nunnally JC, Bernstein IH (1994) Psychometric theory, 3rd edn. McGraw-Hill, Inc., New York.
31. Sarker S, Lau F, Sahay S (2001) Using an adapted grounded theory approach for inductive theory building about virtual team development. Database Adv Inform Syst 32(1): 38.
32. Segars AH (1997) Assessing the unidimensionality of measurement: a paradigm and illustration within the context of information systems research. Omega 25(1): 107-121.
33. Strauss AL, Corbin JM (1990) Basics of qualitative research: grounded theory procedures and techniques. Sage, Newbury Park.
34. Vasek ME (1986) Lying as a skill: the development of deception in children. In: Mitchell RW(eds) Deception, perspectives on human and non-human deceit. State University of New York Publishing, New York, NY.
35. Wu M, Miller RC, Garfinkel SL (2006) Do security toolbars actually prevent phishing attacks? Computer human interaction conference Montreal, QB, Canada, 2006.
36. Zhou L, Burgoon JK, Twitchell DP, Qin T et al (2004) A comparison of classification methods for predicting deception in computer-mediated communication. J Manag Inform Syst 20(4): 139-166.