钓鱼知识、线索利用和决策风格在识别钓鱼邮件中的作用

The roles of phishing knowledge, cue utilization, and decision styles in phishing email detection

Applied Ergonomics · 2024
被引 10
ABS 3

中文导读

研究了145名参与者在识别钓鱼邮件时,钓鱼知识、线索利用和决策风格的作用,发现线索利用是唯一能区分钓鱼与正常邮件的能力,直觉决策者更容易误判。

Abstract

This study investigated the roles of phishing knowledge, cue utilization, and decision styles in contributing to phishing email detection. Participants (N = 145) completed an online email sorting task, and measures of phishing knowledge, email decision styles, cue utilization, and email security awareness. Cue utilization was the only factor that uniquely predicted the capacity to discriminate phishing from genuine emails. Phishing knowledge was associated with greater phishing detection and a bias towards classifying all emails as phishing. A preference for intuitive decision making predicted lower detection of phishing emails, driven by a greater tendency to classify emails as genuine. These findings support the proposition that cue utilization is a distinct cognitive process that enables expert performance. The outcomes indicate that, in addition to increasing phishing knowledge and developing safe behavioral patterns, anti-phishing training needs to provide opportunities for trainees to develop meaningful cue associations.

网络钓鱼信息安全认知心理学电子邮件安全