Developing a measure of information seeking about phishing
Developing a measure of information seeking about phishing
复制标题
制定有关网络钓鱼的信息搜索措施
DOI：
10.1093/cybsec/tyaa001
复制
发表时间：
2020
影响因子：
3.9
通讯作者：
Joinson A
中科院分区：
文献类型：
--
作者：
Joinson A
网络钓鱼电子邮件是用于获取敏感信息或安全计算机系统的欺诈性电子邮件。它们诱使用户点击恶意链接、下载附件或提供敏感信息，如用户名或密码。一种旨在降低人们对网络钓鱼的敏感性的方法是向用户提供关于网络钓鱼威胁和网络钓鱼电子邮件中使用的技术的信息。与此相一致，在组织和更广泛的社会中经常使用宣传活动来提高对网络钓鱼的认识，并鼓励人们参与保护信息。然而，这种方法在降低易感性方面的潜在有效性仍然不确定。特别是，缺乏研究调查（i）访问此类信息的倾向本身是否会影响对网络钓鱼的敏感性，以及（ii）促使人们首先接触信息的不同因素。为了了解用户如何使用当前和未来的网络钓鱼干预措施，以及它们对网络钓鱼易感性的潜在影响，进行基于理论的研究为调查这些问题提供基础是很重要的。本研究提供了解决这个问题的第一步，通过开发和验证一个基于理论的调查措施，在两项研究中，以保护动机理论（感知脆弱性，严重性，自我效能和响应效能）的结构为中心，以评估影响人们是否选择跟上最新的保护信息有关网络钓鱼的因素。然后在研究2中使用此调查措施，以提供这些结构在以下方面的作用的初步调查：（i）自我报告的用户意图，以在未来跟上网络钓鱼技术;（ii）网络钓鱼识别能力，使用网络钓鱼测验进行评估。总体而言，更高的感知威胁的严重程度，自我效能和反应效能与更大的意图，而更大的感知脆弱性与较低的意图。没有发现与钓鱼识别能力的关系。通过了解影响用户保持知识和寻求有关网络钓鱼威胁的信息的意图的因素，可以确保在制定有效干预措施时，可以最大限度地发挥其潜在影响。
Phishing e-mails are fraudulent e-mails used to gain access to sensitive information or secure computer systems. They persuade users to click on malicious links, download attachments or provide sensitive information, such as usernames or passwords. One approach that aims to reduce people’s susceptibility to phishing is the provision of information to users regarding the phishing threat and the techniques used within phishing e-mails. In line with this, awareness campaigns are often used within organizations and wider society to raise awareness of phishing and encourage people to engage with protective information. However, the potential effectiveness of such approaches in reducing susceptibility remains uncertain. In particular, there is a lack of research investigating (i) whether the propensity to access such information may in itself influence susceptibility to phishing and (ii) the different factors that motivate people to engage with information in the first place. In order to understand how current and future interventions regarding phishing may be consumed by users, as well as their potential impact on phishing susceptibility, it is important to conduct theoretically based research that provides a foundation to investigate these issues. This study provides a first step in addressing this by developing and validating a theoretically based survey measure across two studies centred upon the constructs of protection motivation theory (perceived vulnerability, severity, self-efficacy and response efficacy) to assess the factors that influence whether people choose to keep up to date with protective information about phishing. This survey measure is then used within Study 2 to provide an initial investigation of the role of these constructs in (i) self-reported user intentions to keep up to date with phishing techniques in the future and (ii) phishing discrimination ability, assessed using a phishing quiz. Overall, higher perceived threat severity, self-efficacy and response efficacy were associated with greater intentions, while greater perceived vulnerability was associated with lower intentions. No relationship was found with phishing discrimination ability. By understanding the factors that influence user intention to maintain knowledge and seek information about phishing threats, it will be possible to ensure that, as effective interventions are developed, their potential impact can be maximized.
登录
查看更多内容
影响因子：
7.6
作者：
BARON, RM;KENNY, DA
通讯作者：
KENNY, DA
为什么有些人比其他人更好地管理网络钓鱼电子邮件？
DOI：
--
发表时间：
2012
期刊：
Information Management & Computer Security
影响因子：
--
作者：
M. Pattinson;C. Jerram;K. Parsons;Agata McCormac;M. Butavicius
通讯作者：
M. Butavicius
影响因子：
2.5
作者：
Rimal, Rajiv N.;Juon, Hee-Soon
通讯作者：
Juon, Hee-Soon
影响因子：
4.1
作者：
Logg, Jennifer M.;Haran, Uriel;Moore, Don A.
通讯作者：
Moore, Don A.
扩展保护动机理论以了解移动设备上防病毒软件使用的安全决定因素
DOI：
--
发表时间：
--
期刊：
影响因子：
--
作者：
Waleed Al
通讯作者：
Waleed Al