Investigating Phishing Susceptibility—An Analysis of Neural Measures

Valecha, Rohit; Gonzalez, Adam; Mock, Jeffrey R.; Golob, Edward J.; Rao, H. Raghav

doi:10.1007/978-3-030-28144-1_12

Cited by 7 publications

(3 citation statements)

References 19 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

Section: Victim Cognition Through the Lens Of Social Engineering Cmentioning

confidence: 99%

“…These questions need to be answered using experimental studies. Note that the framework can be expanded to include measures of brain activity, either direct measures such as electroencephalography, or indirectly using peripheral measures such as eye tracking and autonomic nervous system activity (Valecha et al, 2020). Specific to the cybersecurity domain, we propose considering persuasion-related behavior, as shown in Figure 2 and the corresponding mathematical representation of Equation ( 1), meaning that the outcome in Equation ( 1) can be replaced by the probability that a user is persuaded by the attacker to act as the attacker intended.…”

Section: Victim Cognition Functions: a Preliminary Mathematical Representationmentioning

confidence: 99%

See 1 more Smart Citation

Human Cognition Through the Lens of Social Engineering Cyberattacks

Montañez

Golob

2020

Front. Psychol.

View full text Add to dashboard Cite

Social engineering cyberattacks are a major threat because they often prelude sophisticated and devastating cyberattacks. Social engineering cyberattacks are a kind of psychological attack that exploits weaknesses in human cognitive functions. Adequate defense against social engineering cyberattacks requires a deeper understanding of what aspects of human cognition are exploited by these cyberattacks, why humans are susceptible to these cyberattacks, and how we can minimize or at least mitigate their damage. These questions have received some amount of attention, but the state-of-the-art understanding is superficial and scattered in the literature. In this paper, we review human cognition through the lens of social engineering cyberattacks. Then, we propose an extended framework of human cognitive functions to accommodate social engineering cyberattacks. We cast existing studies on various aspects of social engineering cyberattacks into the extended framework, while drawing a number of insights that represent the current understanding and shed light on future research directions. The extended framework might inspire future research endeavor toward a new sub-field that can be called Cybersecurity Cognitive Psychology , which tailors or adapts principles of Cognitive Psychology to the cybersecurity domain while embracing new notions and concepts that are unique to the cybersecurity domain.

show abstract

Section: Victim Cognition Through the Lens Of Social Engineering Cmentioning

confidence: 99%

Section: Victim Cognition Functions: a Preliminary Mathematical Representationmentioning

confidence: 99%

Human Cognition Through the Lens of Social Engineering Cyberattacks

Montañez

Golob

2020

Front. Psychol.

View full text Add to dashboard Cite

show abstract

“…Phishing impacts online users and organisations of all size and sectors including banks and public services. The financial costs to victims due to phishing attacks worldwide are staggering and currently estimated to surpass a trillion dollars [38]. In the U.S. alone, the financial costs to businesses between 2013 and 2019 are estimated to be more than $10 billion [17].…”

Section: Introductionmentioning

confidence: 99%