Interaction of Personality and Persuasion Tactics in Email Phishing Attacks
Interaction of Personality and Persuasion Tactics in Email Phishing Attacks
复制标题
电子邮件网络钓鱼攻击中个性与说服策略的相互作用
DOI：
--
复制
发表时间：
2017
期刊：
影响因子：
--
通讯作者：
C. Mayhorn
中科院分区：
文献类型：
--
作者：
Patrick A. Lawson;O. Zielinska;C. J. Pearson;C. Mayhorn
网络钓鱼是一种社会工程策略，其中恶意行为者冒充值得信赖的第三方，意图欺骗用户泄露敏感信息。以前的社会工程研究表明，性格和说服原则之间的相互作用。本研究旨在调查这种互动是否存在于电子邮件网络钓鱼领域。为了调查这一点，我们使用了一个个性清单和一个电子邮件识别任务（网络钓鱼或合法）。识别任务中使用的电子邮件利用了Cialdini的四个说服原则。我们的数据证实了之前的研究结果，即高外向性预示着对网络钓鱼攻击的敏感性增加。此外，我们确定个性和具体的说服原则之间的多种相互作用。我们还报告了各种说服原则对网络钓鱼电子邮件识别准确性的总体功效。
Phishing is a social engineering tactic where a malicious actor impersonates a trustworthy third party with the intention of tricking the user into divulging sensitive information. Previous social engineering research has shown an interaction between personality and the persuasion principle used. This study was conducted to investigate whether this interaction is present in the realm of email phishing. To investigate this, we used a personality inventory and an email identification task (phishing or legitimate). The emails used in the identification task utilize four of Cialdini’s persuasion principles. Our data confirms previous findings that high extroversion is predictive of increased susceptibility to phishing attacks. In addition, we identify multiple interactions between personality and specific persuasion principles. We also report the overarching efficacy of various persuasion principles on phishing email identification accuracy.