Knowledge and Capabilities that Non-Expert Users Bring to Phishing Detection
summary
Survey of a demographically matched U.S. sample of 297 non-expert email users measures how many perform each of six expert-derived phishing checks and finds concrete numbers: 72% report familiarity with similar emails, 95% say the phishing message was unexpected, 86% notice something abnormal, 94% remember the requested action, 76% find the action unusual, and 73% deliberately delay to investigate. Technical filters lack those human capabilities, so targeted training that leverages remembering unusual requested action and intentional delay to investigate is likely to improve prevention.
AI-written summary · about
chapters (4)
related talks
27mBlunting the Phisher's Spear: A Risk-Based Approach...
09mPresenting Suspicious Details in User-Facing E-mail Headers Does Not Improve...
42mPhishing With a Net: The NIST Phish Scale and Cybersecurity Awareness
41mHook, Line, & Sinker - Addressing the Human Risk of Phishing and How to Avoid the Bait
26mDon't Blame the User! Stop the Phish Before it is Even Sent
53mRisk Profiles: Why Some Employees Attract Danger and Others Dodge It
32mDetecting Credential Spearphishing in Enterprise Settings
12m"I don’t know why I check this...'' Investigating Expert Users' Strategies to Detect...