Going spear phishing: Exploring embedded training and awareness

IEEE Security and Privacy

Volumn 12, Issue 1, 2014, Pages 28-38

  Caputo, Deanna D ^a   Pfleeger, Shari Lawrence ^b   Freeman, Jesse D ^a   Johnson, M Eric ^c  

^a MITRE CORPORATION   (United States)

^b DARTMOUTH COLLEGE   (United States)

^c VANDERBILT UNIVERSITY   (United States)

Author keywords

behavioral science; embedded training; security awareness; spear phishing

Indexed keywords

ELECTRONIC MAIL; EXPERIMENTS;

BEHAVIORAL SCIENCE; LARGE SCALE EXPERIMENTS; SECURITY AWARENESS; SPEAR PHISHING; TRAINING CONDITIONS; TRAINING MATERIAL; WORKERS';

COMPUTER CRIME;

EID: 84896486103     PISSN: 15407993     EISSN: None     Source Type: Journal    
DOI: 10.1109/MSP.2013.106     Document Type: Article

References (12)

1. B. Landreth, Out of the Inner Circle, Microsoft Press, 1985.
2. K.J. Higgins, "Spear-Phishing Experiment Evades Big Name Email Products," Dark Reading, 5 Jan. 2010, www. darkreading.com/end-user/spear- phishing-experiment-evades-big-nam/222200326.
3. "Phishing Activity Trends Report 2nd Half 2010," Anti-Phishing Working Group, July 2011; www.antiphishing. org/reports/apwg-report-h2-2010.pdf.
4. M.J. Schwartz, "Spear Phishing Att acks on the Rise," Information Week, 8 June 2011; www.informationweek.com/news/security/att acks/230500025.
5. "Phishing Activity Trends Report 1st Half 2011," Anti-Phishing Working Group, 2011; htt p://docs.apwg.org/reports/apwg-trends-report-h1-2011. pdf.
6. "Email Att acks: Th is Time It's Personal," Cisco, June 2011, www.cisco.com/en/US/prod/collateral/vpndevc/ps10128/ps10339/ps10354/ targeted-att acks.pdf.
7. S.L. Pfl eeger, D. Caputo, and M.E. Johnson, Workshop Report: Cyber Security through a Behavioral Lens II, Inst. Information Infrastructure Protection, July 2010; www. thei3p.org/docs/publications/442.pdf.
8. D. Bank, "Spear Phishing Tests Educate People about Online Scams," Th e Wall Street J., 17 Aug. 2005; htt p://online.wsj.com/public/ article/0,SB112424042313 615131-z-8jLB2WkfcVtgdAWf6LRh733sg-20060817, 00.html?mod=blogs.
9. J. Hong, "Th e State of Phishing Att acks," Comm. ACM, vol. 55, no. 1, 2012, pp. 74-81.
10. P. Kumaraguru et al., "Protecting People from Phishing: Th e Design and Evaluation of an Embedded Training Email System," Proc. Conf. Human Factors in Computing Systems (CHI 07), ACM, 2007, pp. 905-914. (Pubitemid 47581678)
11. P. Kumaraguru et al., "School of Phish: A Real-World Evaluation of Anti-Phishing Training," Proc. Symp. Usable Privacy and Security (SOUPS 09), ACM, 2009, article 3.
12. A. Tversky and D. Kahneman, "Th e Framing of Decisions and the Psychology of Choice," Science, vol. 211, no. 4481, 1981, pp. 453-458. (Pubitemid 11145313)