Individual processing of phishing emails: How attention and elaboration protect against phishing

Online Information Review

Volumn 40, Issue 2, 2016, Pages 265-281

  Harrison, Brynne ^a   Svetieva, Elena ^b   Vishwanath, Arun ^a  

^a UNIVERSITY AT BUFFALO   (United States)

^b CATÓLICA LISBON SCHOOL OF BUSINESS AND ECONOMICS   (Portugal)

Author keywords

Experimental study; Online cognitive processing; Online deception; Phishing

Indexed keywords

CRIME; DECISION MAKING; ELECTRONIC MAIL;

COGNITIVE PROCESSING; DESIGN/METHODOLOGY/APPROACH; EXPERIMENTAL STUDY; INDIVIDUAL FACTORS; KNOWLEDGE AND EXPERIENCE; ONLINE DECEPTION; PHISHING; PRIVATE INFORMATION;

COMPUTER CRIME;

ATTENTION; CONSENSUS DEVELOPMENT; DECEPTION; DECISION MAKING; E-MAIL; EXPOSURE; FIELD EXPERIMENT; FRAUD; HUMAN; INFORMATION PROCESSING; MAJOR CLINICAL STUDY; REWARD; STUDENT; TRANSCRIPTION REGULATION;

EID: 84962381638     PISSN: 14684527     EISSN: None     Source Type: Journal    
DOI: 10.1108/OIR-04-2015-0106     Document Type: Article

References (39)

1. Abe, J.A.A. (2012), "Cognitive-affective styles associated with position on war", Journal of Language and Social Psychology, Vol. 31 No. 2, pp. 212-222.
2. Anandpara, V., Dingman, A., Jakobsson, M., Liu., D. and Roinestead, D. (2007), " Phishing IQ tests measure fear, not ability ", Proceedings of the 11th International Conference on Financial Cryptography and 1st International Conference on Usable Security, Heidelberg and Berlin, pp. 362-366.
3. Anti Phishing Work Group (2014), "Phishing activity trends report", 2nd Quarter, APWG, San Francisco, CA, available at: www.apwg.org (accessed January 2015).
4. Buller, D.B. and Burgoon, J.K. (1996), "Interpersonal deception theory", Communication Theory, Vol. 6 No. 3, pp. 203-242.
5. Das, E.H.H.J., de Wit, J.B.F. and Stroebe, W. (2003), "Fear appeal motivate acceptance of action recommendation: evidence for a positive bias in the processing of persuasive messages", Personality and Social Psychology Bulletin, Vol. 29 No. 5, pp. 650-664.
6. Dhamija, R., Tygar, J.D. and Hearst, M. (2006), "Why phishing works", Proceedings of Conference on Human Factors in Computing Systems, Montreal, pp. 581-590.
7. Dijksterhuis, A., Bos, M.W., Nordgren, L.F. and van Baaren, R.B. (2006), "On making the right choice: the deliberation-without-attention effect", Science, Vol. 311 No. 5763, pp. 1005-1007.
8. Downs, J., Holbrook, M. and Cranor, L. (2006), "Decision strategies and susceptibility to phishing", Symposium on Usable Privacy and Security, Pittsburgh, PA.
9. Dreschler, G. (2012), "One language, two grammars? Differences between British and American English", English Studies, Vol. 93 No. 2, pp. 244-246.
10. Ekman, P. (1985), Telling Lies: Clues to Deceit in the Marketplace, Marriage, and Politics, W.W. Norton, New York, NY.
11. Ekman, P. and Friesen, W.V. (1969), "Nonverbal leakage and cues to deception", Psychiatry, Vol. 32 No. 1, pp. 88-105.
12. Evans, J.S.B. (2008), "Dual-processing accounts of reasoning, judgement and social cognition", Annual Review of Psychology, Vol. 59, pp. 255-278.
13. Feeley, T.H., deTurck, M.A. and Young, M.J. (1995), "Baseline familiarity in lie detection", Communication Research Reports, Vol. 12 No. 2, pp. 160-169.
14. Gonzales, A.L., Hancock, J.T. and Pennebaker, J.W. (2010), "Language style matching as a predictor of social dynamics in small groups", Communication Research, Vol. 37 No. 1, pp. 3-19.
15. Harrison, B., Vishwanath, A., Yu, J. Ng and Rao, R. (2015), "Examining the impact of presence on individual phishing victimization", 48th Hawaii International Conference on System Sciences (HICSS), January 5-8, pp. 3483-3489. doi: 0.1109/HICSS.2015.419.
16. Hayes, A.F. and Matthes, J. (2009), "Computational procedures for probing interactions in OLS and logistic regression: SPSS and SAS implementations", Behavior Research Methods, Vol. 41 No. 3, pp. 924-936.
17. Jackson, C., Simon, D.R., Tan, D.S. and Barth, A. (2007), "An evaluation of extended validation and picture-in-picture phishing attacks", in Ditrich, S. and Dhamija, R.R. (Eds), Financial Cryptography and Data Security, Springer Berlin Heidelberg, New York, NY, pp. 281-293.
18. Jakobsson, M. (2007), "The human factor in phishing", Privacy & Security of Consumer Information, Vol. 7 No. 1, pp. 1-19.
19. Jakobsson, M., Tsow, A., Shah, A., Blevis, E. and Lim, Y. (2007), "What instills trust? A qualitative study of phishing", in Ditrich, S. and Dhamija, R.R. (Eds), Financial Cryptography and Data Security: Lecture Notes in Computer Science, Volume 4886, Springer Berlin Heidelberg, New York, NY, pp. 356-361.
20. Pennebaker, J.W. and Stone, L.D. (2003), "Words of wisdom: language use over the lifespan", Journal of Personality and Social Psychology, Vol. 85 No. 2, pp. 291-301.
21. Pennebaker, J.W., Booth, R.J. and Francis, M.E. (2007), Linguistic Inquiry and Word Count (LIWC2001), LIWC.net, Austin, TX.
22. Petty, R.E. and Cacioppo, J.T. (1986), "The elaboration likelihood model of persuasion", in Berkowitz, L. (Ed.), Advances in Experimental Social Psychology, Vol 19, Academic Press, New York, NY, pp. 123-205.
23. Reyna, V.F. (2004), "How people make decisions that involve risk: a dual-processes approach", Current Directions in Psychological Science, Vol. 13 No. 2, pp. 60-66.
24. Rogers, E.M. (1995), Diffusion of Innovations, Simon and Schuster, New York, NY, p. 12.
25. Rogers, R.W. (1983), "Cognitive and physiological processes in fear appeals and attitude change: a revised theory of protection motivation", in Cacioppo, J. and Petty, R. (Eds), Social Psychophysiology, Guilford, New York, NY, pp. 153-176.
26. Schenck-Hamlin, W.J., Procter, D.E. and Rumsey, D.J. (2000), "The influence of negative advertising frames on political cynicism and politician accountability", Human Communication Research, Vol. 26 No. 1, pp. 53-74.
27. Sheng, S., Holbrook, M., Kumaraguru, P., Cranor, L.F. and Downs, J. (2010), "Who falls for phish? A demographic analysis of phishing susceptibility and effectiveness of interventions", Proceedings of the SIGCHI Conference on Human Factors in Computing Systems, ACM, pp. 373-382.
28. Smith, S.D. and Caruso, J.B. (2010), The ECAR Study of Undergraduate Students and Information Technology, Educause, CO.
29. Tausczik, Y.R. and Pennebaker, J.W. (2010), "The psychological meaning of words: LIWC and computerized text analysis methods", Journal of Language and Social Psychology, Vol. 29 No. 1, pp. 24-54.
30. Team, Verizon RISK (2013), "Verizon 2013 data breach investigations report", available at: www.verizonenterprise.com/resources/reports/rp-data-breach-investigations-report-2013-en-xg.pdf (accessed June 25, 2014).
31. Toma, C.L. and Hancock, J.T. (2012), "What lies beneath: the linguistic traces of deception in online dating profiles", Journal of Communication, Vol. 62 No. 1, pp. 78-97.
32. Vishwanath, A. (2004), "Impact of personality on technology adoption: an empirical model", Journal of the American Society for Information Science and Technology, Vol. 56 No. 8, pp. 803-811.
33. Vishwanath, A., Harrison, B. and Ng, Y.J. (2015), "Suspicion, cognition, automaticity model (SCAM) of phishing susceptibility", presented at the Annual Meeting of 65th International Communication Association Conference, San Juan.
34. Vishwanath, A., Herath, T., Chen, R., Wang, J. and Rao, H.R. (2011), "Why do people get phished? Testing individual differences in phishing vulnerability within an integrated information processing model", Decision Support Systems, Vol. 51 No. 3, pp. 576-586.
35. Workman, M. (2008), "A test of intervention for security threats from social engineering", Information Management & Computer Security, Vol. 16 No. 5, pp. 463-483.
36. Wright, R. and Marett, K. (2010), "The influence of experiential and dispositional factors in phishing: an empirical investigation of the deceived", Journal of Management Information Systems, Vol. 27 No. 1, pp. 273-303.
37. Zhou, L., Burgoon, J.K., Nunamaker, J.F. and Twitchell, D. (2004), "Automating linguistics-based cues for detecting deception in asynchronous computer-mediated communications", Group Decision and Negotiation, Vol. 13 No. 1, pp. 81-106.
38. Hale, J.L., Lemieux, R. and Mongeau, P.A. (1995), "Cognitive processing of fear-arousing message content", Communication Research, Vol. 22 No. 4, pp. 459-474.
39. Petty, R.E. and Jarvis, W.B.G. (1996), "An individual differences perspective on assessing cognitive processes", in Schwarz, N. and Sudman, S. (Eds), Answering Questions: Methodology for Determining Cognitive and Communicative Processes in Survey Research, Jossey-Bass, San Francisco, CA, pp. 221-257.