"I don’t know why I check this...'' Investigating Expert Users' Strategies to Detect...
summary
25 expert users inspect eight Thunderbird emails (four spoofed, four legitimate) using Enigmail/OpenPGP. Participants perform 23 different checks (mean 9.8 each) but only 8 checks reliably help; useful checks include the Enigmail banner, the letter-icon status, and comparing the From header to the signer, while a green “good signature” bar can be actively misleading. 52% of experts fall for at least one spoof (0.76 successful attacks per participant). Interface confusion is frequent; recommendations: single smart indicator, make secure the default, reduce checking complexity.
AI-written summary · about
chapters (5)
- 0:00Introduction
- 0:24Objectives
- 4:52Results
- 5:50How useful were the checks
- 8:35How successful were the checks
related talks
16mChecking, nudging or scoring? Evaluating e-mail user security tools
05mKnowledge and Capabilities that Non-Expert Users Bring to Phishing Detection
24mEnd-to-End Measurements of Email Spoofing Attacks
26mDon't Blame the User! Stop the Phish Before it is Even Sent
28mAn Inconvenient Trust: User Attitudes Toward Security and Usability Tradeoffs...
44mModern Email Security
12mUnderstanding the Viability of Gmail's Origin Indicator for Identifying the Sender
43mA short examination on the intersection of security and usability