The mediating effect of anti-phishing self-efficacy between college students’ internet self-efficacy and anti-phishing behavior and gender difference

Sun, Jerry Chih‐Yuan; Yu, Shih‐Jou; Lin, Sunny S. J.; Tseng, Shian‐Shyong

doi:10.1016/j.chb.2016.02.004

Cited by 49 publications

(19 citation statements)

References 25 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…They determined that higher education level, age, and being male lead to less susceptibility. Sun, et al [17] investigated links between gender and behavior. In contrast, the research team did not find a significant difference in gender.…”

Section: Previous Workmentioning

confidence: 99%

Phishing in an academic community: A study of user susceptibility and behavior

Diaz¹,

Sherman²,

Joshi

2019

Cryptologia

View full text Add to dashboard Cite

We present an observational study on the relationship between demographic factors and phishing susceptibility at the University of Maryland, Baltimore County (UMBC). In spring 2018, we delivered phishing attacks to 450 randomlyselected students on three different days (1,350 students total) to examine user click rates and demographics among UMBC's undergraduates. Participants were initially unaware of the study. We deployed the Billing Problem, Contest Winner, and Expiration Date phishing tactics. Experiment 1 claimed to bill students; Experiment 2 enticed users with monetary rewards; and Experiment 3 threatened users with account cancellation.We found correlations resulting in lowered susceptibility based on college affiliation, academic year progression, cyber training, involvement in cyber clubs or cyber scholarship programs, time spent on the computer, and age demographics. We found no significant correlation between gender and susceptibility. Contrary to our expectations, we observed greater user susceptibility with greater phishing knowledge and awareness. Students who identified themselves as understanding the definition of phishing had a higher susceptibility than did their peers who were merely aware of phishing attacks, with both groups having a higher susceptibility than those with no knowledge of phishing. Approximately 59% of subjects who opened the phishing email clicked on its phishing link, and approximately 70% of those subjects who additionally answered a demographic survey clicked.

show abstract

Section: Previous Workmentioning

confidence: 99%

Phishing in an academic community: A study of user susceptibility and behavior

Diaz¹,

Sherman²,

Joshi

2019

Cryptologia

View full text Add to dashboard Cite

show abstract

“…Gender is an important factor in characterizing human behavior in general and behavior and beliefs in IS in particular. Previous studies have found significant gender-based differences in computer skills, previous experience, self-efficacy, security and network security behavior (Anwar et al, 2017;Bouhnik and Deshen, 2014;Sun et al, 2016). Analyzing the findings of this study separately for men and women in this study reveals that, according to the participants' testimonies, men are more familiar with the concepts of IS than women, and are more likely to implement tools to secure their information.…”

Section: Personality Traitsmentioning

confidence: 54%

Readiness for information security of teachers as a function of their personality traits and their assessment of threats

Aharony

Bouhnik

Reich

2020

AJIM

View full text Add to dashboard Cite

PurposeThis study examines the impact of personality traits on the degree of challenge experienced by individuals with respect to the threat on their information, the evaluation of their self-efficacy to secure the information and hence, their readiness to secure information.Design/methodology/approachThe study's population consisted of 157 teachers from various educational institutions across Israel. We used five questionnaires to gather data.FindingsFindings reveal a link between participants' personality traits, situation evaluation indicators and their readiness to secure information. Further, the greater subjects' information security awareness and familiarity with information security concepts, the better their application of the tools for securing information will be.Originality/valueThe importance of this research lies primarily in that it highlights the importance of individual differences while dealing with information security awareness. The findings constitute a theoretical and empirical basis for building tools toward guiding teachers to protect their information, as well as for devising educational and pedagogic programs for making a cultural change.

show abstract

“…Multiple Comparisons Problem: We noticed that several papers, e.g., [61], [217], [222], [224]- [226], [232]- [234], [238], [241], [242], [246], [247], [249], [263], made their statistically significant conclusion by running multiple tests on a single dependent variable. Multiple comparisons problem causes incorrect rejection of null hypothesis, if not accompanied by p-value adjustment (increases type 1 error) [267].…”

Section: B Experimental Attributesmentioning

confidence: 99%

SoK: A Comprehensive Reexamination of Phishing Research From the Security Perspective

Das

Baki

Aassal

et al. 2020

IEEE Commun. Surv. Tutorials

108

View full text Add to dashboard Cite

Phishing and spear phishing are typical examples of masquerade attacks since trust is built up through impersonation for the attack to succeed. Given the prevalence of these attacks, considerable research has been conducted on these problems along multiple dimensions. We reexamine the existing research on phishing and spear phishing from the perspective of the unique needs of the security domain, which we call security challenges: real-time detection, active attacker, dataset quality and baserate fallacy. We explain these challenges and then survey the existing phishing/spear phishing solutions in their light. This viewpoint consolidates the literature and illuminates several opportunities for improving existing solutions. We organize the existing literature based on detection techniques for different attack vectors (e.g., URLs, websites, emails) along with studies on user awareness. For detection techniques we examine properties of the dataset, feature extraction, detection algorithms used, and performance evaluation metrics. This work can help guide the development of more effective defenses for phishing, spear phishing and email masquerade attacks of the future, as well as provide a framework for a thorough evaluation and comparison.

show abstract

The mediating effect of anti-phishing self-efficacy between college students’ internet self-efficacy and anti-phishing behavior and gender difference

Cited by 49 publications

References 25 publications

Phishing in an academic community: A study of user susceptibility and behavior

Phishing in an academic community: A study of user susceptibility and behavior

Readiness for information security of teachers as a function of their personality traits and their assessment of threats

SoK: A Comprehensive Reexamination of Phishing Research From the Security Perspective

Contact Info

Product

Resources

About