Phishing and Cybercrime Risks in a University Student Community
Phishing and Cybercrime Risks in a University Student Community
复制标题
大学生社区中的网络钓鱼和网络犯罪风险
DOI：
--
复制
发表时间：
2019
期刊：
影响因子：
--
通讯作者：
Yuguang F. Ipsen
中科院分区：
文献类型：
--
作者：
R. Broadhurst;Katie Skinner;Nicholas Sifniotis;Bryan Matamoros;Yuguang F. Ipsen
在一项探索性准实验观察研究中，2017 年大学迎新周期间招募的 138 名参与者在几个月内接触到以虚假电子邮件或网络钓鱼攻击形式存在的社会工程指令。这些电子邮件攻击试图从参与者那里获取个人信息或诱使他们点击在现实环境中可能已被泄露的链接。该研究旨在通过观察学生对社会工程的反应并探索网络钓鱼阶段前后对网络犯罪风险的态度来确定学生的网络犯罪风险。分发了三种类型的诈骗电子邮件，其个性化程度各不相同：通用、定制、有针对性或“矛”。为了根据网络犯罪意识区分参与者，处于“猎人”状态的参与者在整个研究过程中都做好了对所有诈骗保持警惕的准备，而处于“被动”状态的参与者则没有收到此类指示。该研究探讨了诈骗类型、网络犯罪意识、性别、IT 能力和互联网安全感知对电子邮件诈骗易感性的影响。与假设相反，这些因素均与诈骗的易感性无关。尽管如此，定制和单独制作的电子邮件诈骗比一般诈骗更有可能引起参与。对所有变量的分析表明，国际学生和一年级学生遭受的诈骗明显多于国内学生和高年级学生。我们进行了广义线性模型 (GLM) 分析，以进一步探讨所有感兴趣变量的作用，结果与描述性发现一致，表明学生身份（国内与国际相比）和学习年份（一年级学生与第二年、第三年和更高年级的学生相比）与诈骗风险具有更高的关联。讨论了影响和未来的研究方向。
In an exploratory quasi-experimental observational study, 138 participants recruited during a university orientation week were exposed to social engineering directives in the form of fake email or phishing attacks over several months in 2017. These email attacks attempted to elicit personal information from participants or entice them into clicking links which may have been compromised in a real-world setting. The study aimed to determine the risks of cybercrime for students by observing their responses to social engineering and exploring attitudes to cybercrime risks before and after the phishing phase. Three types of scam emails were distributed that varied in the degree of individualization: generic, tailored, and targeted or ‘spear.’ To differentiate participants on the basis of cybercrime awareness, participants in a ‘Hunter’ condition were primed throughout the study to remain vigilant to all scams, while participants in a ‘Passive’ condition received no such instruction. The study explored the influence of scam type, cybercrime awareness, gender, IT competence, and perceived Internet safety on susceptibility to email scams. Contrary to the hypotheses, none of these factors were associated with scam susceptibility. Although, tailored and individually crafted email scams were more likely to induce engagement than generic scams. Analysis of all the variables showed that international students and first year students were deceived by significantly more scams than domestic students and later year students. A Generalized Linear Model (GLM) analysis was undertaken to further explore the role of all the variables of interest and the results were consistent with the descriptive findings showing that student status (domestic compared to international) and year of study (first year student compared to students in second, third and later years of study) had a higher association to the risk of scam deception. Implications and future research directions are discussed.