E-mail Deception and Visual E-Mail Authentication Services: an Investigation

网络钓鱼是一种骗局，通过欺骗电子邮件用户泄露诈骗者可以非法使用的个人或机密信息。本研究探讨了钓鱼攻击的设计特征，调查了个体知识和心理参与如何影响人们在不同欺骗性水平上的钓鱼检测能力，并评估了钓鱼相关教育和钓鱼检测技术在降低个体钓鱼易感性方面的效果。这些实验涉及学生、现实世界的消费者和组织中的员工，以比较电子邮件身份验证工具栏和客户端软件(单独使用或与网络钓鱼相关的教育干预结合使用)在降低个人对网络钓鱼攻击的敏感度方面的有效性。该项目的目的是通过使用内容分析、电话调查和准实验等多种研究方法来探索钓鱼电子邮件的特征，并评估其影响机制。网络钓鱼是一种网络诈骗现象，不仅直接造成数百万美元的损失，还会侵蚀消费者对网络交流和交易的信任。这种侵蚀迫使消费者远离在线企业。打击钓鱼威胁是一项紧迫的任务，需要从多个角度进行研究。这项研究加深了我们对网络钓鱼这一利用人类脆弱性的社会现象的理解。研究小组将研究结果传播给公众、行业组织、研究社区和执法机构。这些渠道包括关于互联网犯罪和信息安全的研讨会，以及与联邦调查局地区办公室合作的当地InfaGuard计划。

Phishing is a scam by which an e-mail user is duped into revealing personal or confidential information that the scammer can use illicitly. This research explores the design features presented in phishing attacks, investigates how individual knowledge and psychological involvement influences people's abilities in phishing detection across levels of deceptiveness, and evaluates the effects of phishing related education and phishing detection technologies in mitigating individuals' phishing susceptibility. The experiments involve students, real world consumers, and employees in an organization to compare the effectiveness of email authentication toolbars and client software (either by themselves or in conjunction with phishing related educational interventions) on mitigating individual susceptibility to phishing attacks. The purpose of the project is to explore the features of phishing e-mails and evaluate the mechanism of its effects by using a variety of research methodologies such as content analysis, telephone surveys, and quasi-experiments. Phishing is a phenomenon of internet fraud that not only directly causes millions of dollars in loss, but also erodes consumers' trust in online communication and transactions. The erosion drives consumers away from online businesses. Fighting the threat of phishing is an urgent task and calls for research from multiple perspectives. The research deepens our understanding of phishing as a social phenomenon that takes advantages of human vulnerabilities. The research team disseminates the findings to the general public, industry organizations, the research community, and law enforcement organizations. The channels include workshops on internet crimes and information security and also the local InfaGuard program in collaboration with a regional FBI office.