Multitasking and Monetary Incentive in a Realistic Phishing Study

Zhang, Haoruo; Singh, Shikha; Li, Xiangyang; Dahbura, Anton; Xie, Meng

doi:10.14236/ewic/hci2018.115

Cited by 7 publications

(6 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…For clarity, the following sections outline the methodology only relevant to the subset of data used for the presented research. Other analyses on these data can be found in Shonman, Li, Zhang, and Dahbura (2018); Zhang, Singh, Li, Dahbura, and Xie (2018).…”

Section: Methodsmentioning

confidence: 99%

Using the Lens Model and Cognitive Continuum Theory to Understand the Effects of Cognition on Phishing Victimization

Molinaro

Bolton

2019

Proceedings of the Human Factors and Ergonomics Society Annual

View full text Add to dashboard Cite

With the growing threat of phishing emails and the limited effectiveness of current mitigation approaches, there is an urgent need to better understand what leads to phishing victimization. There is a limited body of phishing research that identified cognitive automaticity as a potential factor, but more research on the relationship between user cognition and victimization is needed. Additionally, the current phishing research has not considered the characteristics of the environment in which phishing judgments are made. To fill these gaps, this work used the analysis capabilities afforded by the double system lens model (a judgment analysis technique) and the cognitive continuum theory, specifically the task continuum index and the cognitive continuum index. By calculating a task continuum index score, the cognition best suited for the email sorting task was identified. This calculation resulted in a value which indicated that more analytical cognition was most effective. The cognitive continuum index score evaluated the participants’s cognition level while making judgments. The relationships between these measures and achievement were evaluated. Results indicated that more analytical cognition was associated with lower rates of phishing victimization. This work provides a deeper insight into the phishing problem and has implications for combating phishing.

show abstract

Section: Methodsmentioning

confidence: 99%

Using the Lens Model and Cognitive Continuum Theory to Understand the Effects of Cognition on Phishing Victimization

Molinaro

Bolton

2019

Proceedings of the Human Factors and Ergonomics Society Annual

View full text Add to dashboard Cite

show abstract

“…Our work is based on an empirical user study that collected user operations of fine granularity using a modified web application [27,28]. This user study instructed participants recruited online to sort 40 emails using a webmail system.…”

Section: Methodsmentioning

confidence: 99%

Augmenting Authentication with Context-Specific Behavioral Biometrics

Zhang

Singh²,

2019

Proceedings of the Annual Hawaii International Conference on System Sciences

Self Cite

View full text Add to dashboard Cite

Behavioral biometrics, being non-intrusive and cost-efficient, have the potential to assist user identification and authentication. However, user behaviors can vary significantly for different hardware, software, and applications. Research of behavioral biometrics is needed in the context of a specific application. Moreover, it is hard to collect user data in real world settings to assess how well behavioral biometrics can discriminate users. This work aims to improving authentication by behavioral biometrics obtained for user groups. User data of a webmail application are collected in a large-scale user experiment conducted on Amazon Mechanical Turk. Used in a continuous authentication scheme based on user groups, off-line identity attribution and online authentication analytic schemes are proposed to study the applicability of application-specific behavioral biometrics. Our results suggest that the useful user group identity can be effectively inferred from users' operational interaction with the email application.

show abstract

“…In [9], the authors performed a series of significance tests on the data of the present empirical study, finding that multitasking worsened participants' sorting accuracy and that, in general, differences between the conditions affected participants' ability to sort phishing emails, but not legitimate emails. Incentive alone, by contrast, made no difference in either multitasking or no-multitasking cases.…”

Section: Cybersecurity User Studiesmentioning

confidence: 97%

Understanding Security Behavior of Real Users: Analysis of a Phishing Study

Kang¹,

Shonman

Subramanya³

et al. 2021

Proceedings of the Annual Hawaii International Conference on System Sciences

Self Cite

View full text Add to dashboard Cite

This paper presents a set of statistical analyses on an empirical study of phishing email sorting by real online users. Participants were assigned to multitasking and/or incentive conditions in unattended web-based tasks that are the most realistic in any comparable study to date. Our three stages of analyses included logistic regression models to identify individual phishing "cues" contributing to successful classifications, statistical significance tests assessing the links between participants' training experience and self-assessments of success to their actual performance, significance tests searching for significant demographic factors influencing task completion performance, and lastly kmeans clustering based on a range of performance measures and utilizing participants' demographic attributes. In particular, the results indicate that multitasking and incentives create complex dynamics while demographic traits and cybersecurity training can be informative predictors of user security behavior. These findings strongly support the benefits of security training and education and advocate for customized and differentiated interventions to increase users' success of correctly identifying phishing emails.

show abstract

Multitasking and Monetary Incentive in a Realistic Phishing Study

Cited by 7 publications

References 10 publications

Using the Lens Model and Cognitive Continuum Theory to Understand the Effects of Cognition on Phishing Victimization

Using the Lens Model and Cognitive Continuum Theory to Understand the Effects of Cognition on Phishing Victimization

Augmenting Authentication with Context-Specific Behavioral Biometrics

Understanding Security Behavior of Real Users: Analysis of a Phishing Study

Contact Info

Product

Resources

About