EAGER: DCL: SaTC: Enabling Interdisciplinary Collaboration: Inoculation vs. education: the role of real time alerts and end-user overconfidence

EAGER：DCL：SaTC：实现跨学科协作：接种与教育：实时警报和最终用户过度自信的作用

• 批准号: 2210198
• 负责人: Daniel Jones
• 金额: $ 29.99万
• 依托单位: Board of Regents, NSHE, obo University of Nevada, Reno
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2022
• 资助国家: 美国
• 起止时间: 2022-07-01 至 2024-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2210198&HistoricalAwards=false
• 关键词: EAGER; DCL; SaTC; Enabling; Interdisciplinary

Phishing is increasingly problematic in today’s society. Phishing vulnerability is not limited to inexperienced persons. Even those with technological training fall victim to phishing attacks. The research question to be addressed in this project is whether inexperienced people and experts fall victim to phishing for different reasons, and if so, how those different sources of vulnerability might be addressed. Uncertainty and overconfidence, respectively, may characterize the phishing vulnerabilities of persons with less versus more computer literacy. The project team is studying phishing vulnerabilities, testing whether they characterize people with different expertise and confidence, and deploying interventions designed to address differently-caused phishing vulnerabilities. The main interventions to be evaluated include psychological inoculation, whereby people are exposed to repeated, weakened, and harmless phishing experiences, and educational techniques in the form of anti-phishing instructions. The first stage in the project is testing, through controlled experiments, whether people with varying computer literacy, and varying confidence, differ in their approach to phishing avoidance. The next stage is to study the impact of different interventions, including variations on psychological inoculation and anti-phishing instructions, and test how those interventions are associated with persons who vary in their expertise and confidence. A third step will be to develop and evaluate alerts that could be triggered by potential phishing attacks. The identification of at-risk people who could benefit from inoculation training or specialized instruction has the potential for mitigating phishing and many other kinds of attacks on people. A diverse set of students will be involved in the research.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

在当今社会中，网络钓鱼越来越有问题。网络钓鱼脆弱性不仅限于缺乏经验的人。甚至那些接受技术培训的人也成为网络钓鱼攻击的受害者。该项目要解决的研究问题是，由于不同的原因，没有经验的人和专家是否成为网络钓鱼的受害者，如果是的话，如何解决这些不同的脆弱性来源。不确定性和过度自信可能会表征具有较少计算机识字率的人的网络钓鱼脆弱性。项目团队正在研究网络钓鱼漏洞，测试他们是否表征具有不同专业知识和信心的人，并部署旨在解决不同引起的网络钓鱼漏洞的干预措施。要评估的主要干预措施包括心理接种，使人们以反钓鱼指示的形式接触反复，削弱和无害的网络钓鱼经验以及教育技术。该项目的第一阶段是通过受控的实验测试，是否具有不同的计算机素养和不同信心的人，对避免网络钓鱼的方法有所不同。下一阶段是研究不同干预措施的影响，包括对心理接种和反捕捞指示的变化，并测试这些干预措施与他们的专业知识和信心不同的人如何相关。第三步将是开发和评估可能由潜在的网络钓鱼攻击触发的警报。可以从接种培训或专业教学中受益的高风险人群可以减轻网络钓鱼以及对人的许多其他攻击。该奖项反映了NSF的法定任务，并被认为是通过基金会的知识分子优点和更广泛的影响审查标准来评估，这将被视为珍贵的支持。

项目成果

Data Quality and Linguistic Cues for Domain-independent Deception Detection

用于独立于领域的欺骗检测的数据质量和语言线索

• DOI: 10.1109/bdcat56447.2022.00042
• 发表时间: 2022
• 期刊: Applications and Technologies (BDCAT
• 作者: Hanks, Casey;Verma, Rakesh M.
• 通讯作者: Verma, Rakesh M.