User experiences of TORPEDO: TOoltip-poweRed Phishing Email DetectiOn
User experiences of TORPEDO: TOoltip-poweRed Phishing Email DetectiOn
复制标题
DOI：
10.1016/j.cose.2017.02.004
复制
发表时间：
2017-11
期刊：
影响因子：
--
通讯作者：
M. Volkamer;K. Renaud;B. Reinheimer;Alexandra Kunz
中科院分区：
文献类型：
--
作者：
M. Volkamer;K. Renaud;B. Reinheimer;Alexandra Kunz
我们提出了一个名为 TORPEDO 的概念，通过提供及时、就地的值得信赖的工具提示来改进网络钓鱼检测。这些可以帮助人们识别电子邮件中嵌入的网络钓鱼链接。TORPEDO 的工具提示包含实际的 URL，并突出显示域名。链接激活会延迟一小段时间，以便用户在单击链接之前有时间检查 URL。此外，TORPEDO 提供了信息图来解释网络钓鱼检测。我们评估了 TORPEDO 的有效性，并与其他 Web 电子邮件界面提供的最坏情况“状态栏”进行比较。使用 TORPEDO 的人在检测网络钓鱼和识别合法电子邮件方面表现明显更好（网络钓鱼正确答案为 85.17%，正确答案为 43.31%）。然后我们对一些TORPEDO用户进行了实地研究，以探索TORPEDO的实际用户体验。我们通过报告本次实地研究的结果来总结本文，并根据实地研究参与者的反馈提出改进建议。
We propose a concept calledTORPEDOto improve phish detection by providing just-in-time and just-in-place trustworthy tooltips. These help people to identify phish links embedded in emails.TORPEDO's tooltips contain the actual URL with the domainhighlighted. Link activation is delayed for a short period, giving the person time to inspect the URL before they click on a link. Furthermore,TORPEDOprovides an information diagram to explain phish detection. We evaluatedTORPEDO's effectiveness, as compared to the worst case “status bar” as provided by other Web email interfaces. People usingTORPEDOperformed significantly better in detecting phishes and identifying legitimate emails (85.17% versus 43.31% correct answers for phish). We then carried out a field study with a number ofTORPEDOusers to explore actual user experiences ofTORPEDO. We conclude the paper by reporting on the outcome of this field study and suggest improvements based on the feedback from the field study participants.