E-mail Deception and Visual E-Mail Authentication Services: an Investigation

网络钓鱼是一种骗局，通过这种骗局，电子邮件用户被欺骗透露个人或机密信息，骗子可以非法使用。本研究探讨了网络钓鱼攻击的设计特征，调查了个人知识和心理参与如何影响人们在不同欺骗性水平下的网络钓鱼检测能力，并评估了网络钓鱼相关教育和网络钓鱼检测技术在减轻个人网络钓鱼易感性方面的作用。实验涉及学生，真实的世界的消费者，和员工在一个组织中比较电子邮件身份验证服务器和客户端软件（无论是自己或与网络钓鱼相关的教育干预）在减轻个人对网络钓鱼攻击的敏感性的有效性。本研究的目的是通过内容分析、电话调查、准实验等多种研究方法，探索网络钓鱼邮件的特征，并对其影响机制进行评估。网络钓鱼是一种互联网欺诈现象，不仅直接造成数百万美元的损失，而且还侵蚀了消费者对在线通信和交易的信任。这种侵蚀促使消费者远离在线业务。打击网络钓鱼威胁是一项紧迫的任务，需要从多个角度进行研究。这项研究加深了我们对网络钓鱼作为一种利用人类脆弱性的社会现象的理解。研究小组将研究结果传播给公众、行业组织、研究界和执法机构。这些渠道包括关于互联网犯罪和信息安全的讲习班，以及与联邦调查局区域办事处合作的地方InfaGuard方案。

Phishing is a scam by which an e-mail user is duped into revealing personal or confidential information that the scammer can use illicitly. This research explores the design features presented in phishing attacks, investigates how individual knowledge and psychological involvement influences people's abilities in phishing detection across levels of deceptiveness, and evaluates the effects of phishing related education and phishing detection technologies in mitigating individuals' phishing susceptibility. The experiments involve students, real world consumers, and employees in an organization to compare the effectiveness of email authentication toolbars and client software (either by themselves or in conjunction with phishing related educational interventions) on mitigating individual susceptibility to phishing attacks. The purpose of the project is to explore the features of phishing e-mails and evaluate the mechanism of its effects by using a variety of research methodologies such as content analysis, telephone surveys, and quasi-experiments. Phishing is a phenomenon of internet fraud that not only directly causes millions of dollars in loss, but also erodes consumers' trust in online communication and transactions. The erosion drives consumers away from online businesses. Fighting the threat of phishing is an urgent task and calls for research from multiple perspectives. The research deepens our understanding of phishing as a social phenomenon that takes advantages of human vulnerabilities. The research team disseminates the findings to the general public, industry organizations, the research community, and law enforcement organizations. The channels include workshops on internet crimes and information security and also the local InfaGuard program in collaboration with a regional FBI office.