Why do people get phished? Testing individual differences in phishing vulnerability within an integrated, information processing model

Decision Support Systems

Volumn 51, Issue 3, 2011, Pages 576-586

  Vishwanath, Arun ^a   Herath, Tejaswini ^b   Chen, Rui ^c   Wang, Jingguo ^d   Rao, H Raghav ^a  

^a UNIVERSITY AT BUFFALO   (United States)

^b BROCK UNIVERSITY   (Canada)

^c BALL STATE UNIVERSITY   (United States)

^d UNIVERSITY OF TEXAS AT ARLINGTON   (United States)

Author keywords

Attention; Elaboration; Information processing; Message cues; Phishing; Phishing vulnerability; Social engineering

Indexed keywords

ATTENTION; ELABORATION; INFORMATION PROCESSING; MESSAGE CUES; PHISHING; SOCIAL ENGINEERING;

DATA PROCESSING; ELECTRONIC MAIL;

COMPUTER CRIME;

EID: 79955890012     PISSN: 01679236     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.dss.2011.03.002     Document Type: Article

References (48)

1. W. Adams How people watch television as investigated using focus group techniques Journal of Broadcasting & Electronic Media 44 2000 78 94
2. A. Bandura Social foundations of thought and action: a social cognitive theory 1986 Prentice Hall Englewood Cliffs, NJ
3. J.A. Bargh, and P.M. Gollwitzer Environmental control of goal directed action: automatic and strategic contingencies between situation and behavior W.D. Spaulding, Nebraska symposium on motivation 1994 University of Nebraska Press Lincoln 71 124
4. R. Barkhi Cognitive style may mitigate the impact of communication channel Information Management 39:8 2002 677
5. R. Barkhi, and L. Wallace The impact of personality types on purchasing decisions in virtual stores Information Technology and Management 8 4 2007 313 330
6. F. Belanger, and J.S. Hiller Framework for E-government: privacy implications Business Process Management Journal 12 1 2006 48 60
7. F. Belanger, J.S. Hiller, and W.J. Smith Trustworthiness in electronic commerce: the role of privacy, security, and site attributes The Journal of Strategic Information Systems 11 3/4 2002 245 270
8. I. Bose, and A.C.M. Leung Unveiling the mask of phishing: threats, preventive measures, and responsibilities Communications of the AIS 19 24 2007 544 566
9. I. Bose, and A.C.M. Leung Assessing anti-phishing preparedness: a study of online banks in Hong Kong Decision Support Systems 45 4 2008 897 912
10. I. Bose and A.C.M. Leung. What Drives the Adoption of Anti-phishing Measures by Hong King Banks, Communications of the ACM 52 (8), 2009 141-143.
11. D.P. Brios, J.F. George, and R.W. Zmund Inducing sensitivity to deception in order to improve decision making performance: a field study MIS Quarterly 26 2002 119 144
12. D.B. Buller, and J.K. Burgoon Interpresonal deception theory Communication Theory 6 1996 203 242
13. R.B. Cialdini Influence: science and practice 2001 Allyn & Bacon Boston
14. D. Compeau, and C. Higgins Computer self efficacy: development of a measure and initial test MIS Quarterly 19 1995 189 211
15. J. Dewey The reflex arc concept in psychology Psychological Review 3 1896 357 370
16. R. Dhamija, J.D. Tygar, and M. Hearst Why phishing works Conference on Human Factors in Computing Systems, CHI-2006, Montreal, Quebec, Canada 2006
17. J. Downs, M. Holbrook, and L. Cranor Decision strategies and susceptibility to phishing The 2006 Symposium on Usable Privacy and Security, Pittsburgh, PA 2006
18. J. Downs, M. Holbrook, and L. Cranor Decision strategies and susceptibility to phishing Symposium on Usable Privacy and Security, Pittsburgh, PA 2006
19. J. Downs, M. Holbrook, and L. Cranor Behavioral response to phishing risk The Anti-Phishing Working Groups 2nd Annual eCrime Researchers Summit Pittsburgh, Pennsylvania 2007
20. W.P. Eveland, D.V. Shah, and N. Kwak Assessing causality in the cognitive mediation model: a panel study of motivations, information processing, and learning during campaign 2000 Communication Research 30 2003 359 386 (Pubitemid 36946152)
21. R. Gopal, Z. Walter, and A. Tripathi Ad mediation: new horizons in effective email advertising Communications of the ACM 44 2 2001 91 96
22. S. Grazioli Where did they go wrong? An analysis of the failure of knowledgeable internet consumers to detect deception over the internet Group Decision and Negotiation 13 2 2004 149 172 (Pubitemid 39045882)
23. A. Gupta, B.-C. Su, and Z. Walter Risk profile and consumer shopping behavior in electronic and traditional channels Decision Support Systems 38 3 2004 347 367
24. R.L. Holbert, and M.T. Stephenson Structural equation modeling in the communication sciences, 1995-2000 Human Communication Research 28 2002 531 551 (Pubitemid 37496218)
25. T. Jagatic, N. JohnSon, M. Jakobsson, and F. Menczer Social phishing Communications of the ACM 50 10 2007 94 100 (Pubitemid 47505005)
26. M. Jakobsson The human factor in phishing Privacy & Security of Consumer Information, Indiana University, Bloomington, IN 2007
27. M. Jakobsson, A. Tsow, A. Shah, E. Blevis, and Y.-K. Lim What instills trust? A qualitative study of phishing Usable Security (USEC'07), Lowlands, Scarborough, Trinidad/Tobago 2007
28. P.E. Johnson, S. Grazioli, K. Jamal, and I.A. Zualkernan Success and failure in expert reasoning Organizational Behavior and Human Decision Processes 53:2 1992 173 203
29. K.G. Joreskog, and D. Sorbom PRELIS: a program for multivariate data screening and data summarization 1986 Scientific Software Mooresville, IL
30. P. Kamaraguru, Y.W. Rhee, A. Acquisti, L. Cranor, E. Hong, and E. Nunge Protecting people from phishing: The design and evaluation of an embedded training email system 2006 Carnegie Mellon University
31. A. Karakasiliotis, S.M. Furnell, and M. Papadaki Assessing end-user awareness of social engineering and phishing The 7th Australian Information Warfare and Security Conference, Perth, Western Australia 2006
32. R. LaRose, and M.S. Eastin A social cognitive theory of Internet uses and gratifications: toward a new model of media attendance Journal of Broadcasting & Electronic Media 48 2004 358 377
33. R. LaRose, C.A. Lin, and M.S. Eastin Unregulated internet usage: addiction, habit or deficient self-regulation? Media Psychology 2003 225 253 (Pubitemid 36964261)
34. A. Litan, Phishing Attack Victims Likely Targets for Identity Theft, Gartner Group, 2004.
35. H. Markus, and R.B. Zajonc The cognitive perspective in social psychology G. Lindzey, E. Aronson, The handbook of social psychology 1985 Random House New York 137 230
36. J.M. McLeod, G.M. Kosicki, and D.M. McLeod The expanding boundaries of political communication effects J. Bryant, D. Zillmann, Media effects: advances in theory and research 1994 LEA Hillsdale, NJ 123 162
37. L.A. McNall, and S.G. Roch The effects of electronic monitoring type on procedural justice, interpersonal justice, and privacy Journal of Applied Social Psychology 37 2007 658 682
38. E.M. Perse Audience selectivity and involvement in the newer media environment Communication Research 17 1990 675 697
39. R.E. Petty, and J.T. Cacioppo The elaboration likelihood model of persuasion 1986 Academic Press New York 123 205
40. R.E. Petty, J.T., C., and D. Schumann Central and peripheral routes to advertising effectiveness: the moderating role of involvement The Journal of Consumer Research 10 2 1983 135 146
41. J.W. Rigney Learning strategies: a theoretical perspective H.F. O'Neill Jr. Learning strategies 1978 Academic Press New York 165 205
42. E.M. Rogers Diffusion of innovations 5th ed. 2003 Free Press New York
43. D.V. Shah, N. Kwak, M. Schmierbach, and J. Zubric The interplay of news frames on cognitive complexity Human Communication Research 30 2004 102 120 (Pubitemid 39056977)
44. A. Tsow, and M. Jakobbson Deceit and design: a large user study of phishing 2007 Indiana University
45. J. Wang, R. Chen, T. Herath, and H.R. Rao An empirical exploration of the design pattern of phishing attacks S.J. Upadhyaya, H.R. Rao, Annals of emerging research in information assurance, security and privacy services 2009 Emerald Publishers
46. M. Workman Wisecrackers: a theory grounded investigation of phishing and pretext social engineering threats to information security Journal of the American Society of Information Science and Technology 59 2007 662 674 (Pubitemid 351310585)
47. M. Workman Wisecrackers: a theory-grounded investigation of phishing and pretext social engineering threats to information security Journal of the American Society for Information Science and Technology 59 4 2008 662 674 (Pubitemid 351310585)
48. J.L. Zaichkowsky Measuring the involvement construct The Journal of Consumer Research 12 1985 341 352