Why People Still Fall for Phishing Emails: An Empirical Investigation into How Users Make Email Response Decisions
Fuente:
arXiv
Gespeichert in:
| Hauptverfasser: | , , |
|---|---|
| Format: | Preprint |
| Veröffentlicht: |
2024
|
| Schlagworte: | |
| Online-Zugang: | |
| Tags: |
Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
|
| _version_ | 1866929221353340928 |
|---|---|
| author | Jayatilaka, Asangi Arachchilage, Nalin Asanka Gamagedara Babar, Muhammad Ali |
| author_facet | Jayatilaka, Asangi Arachchilage, Nalin Asanka Gamagedara Babar, Muhammad Ali |
| contents | Despite technical and non-technical countermeasures, humans continue to be tricked by phishing emails. How users make email response decisions is a missing piece in the puzzle to identifying why people still fall for phishing emails. We conducted an empirical study using a think-aloud method to investigate how people make 'response decisions' while reading emails. The grounded theory analysis of the in-depth qualitative data has enabled us to identify different elements of email users' decision-making that influence their email response decisions. Furthermore, we developed a theoretical model that explains how people could be driven to respond to emails based on the identified elements of users' email decision-making processes and the relationships uncovered from the data. The findings provide deeper insights into phishing email susceptibility due to people's email response decision-making behavior. We also discuss the implications of our findings for designers and researchers working in anti-phishing training, education, and awareness interventions |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2401_13199 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | Why People Still Fall for Phishing Emails: An Empirical Investigation into How Users Make Email Response Decisions Jayatilaka, Asangi Arachchilage, Nalin Asanka Gamagedara Babar, Muhammad Ali Cryptography and Security Computers and Society Human-Computer Interaction Despite technical and non-technical countermeasures, humans continue to be tricked by phishing emails. How users make email response decisions is a missing piece in the puzzle to identifying why people still fall for phishing emails. We conducted an empirical study using a think-aloud method to investigate how people make 'response decisions' while reading emails. The grounded theory analysis of the in-depth qualitative data has enabled us to identify different elements of email users' decision-making that influence their email response decisions. Furthermore, we developed a theoretical model that explains how people could be driven to respond to emails based on the identified elements of users' email decision-making processes and the relationships uncovered from the data. The findings provide deeper insights into phishing email susceptibility due to people's email response decision-making behavior. We also discuss the implications of our findings for designers and researchers working in anti-phishing training, education, and awareness interventions |
| title | Why People Still Fall for Phishing Emails: An Empirical Investigation into How Users Make Email Response Decisions |
| topic | Cryptography and Security Computers and Society Human-Computer Interaction |
| url | https://arxiv.org/abs/2401.13199 |