Comparison of different training methods impact on users ability to detect phishing

SND-ID: 2021-339-1. Version: 1. DOI: https://doi.org/10.5878/g6d9-7210

Citation

Creator/Principal investigator(s)

Joakim Kävrestad - University of Skövde

Research principal

University of Skövde - School of Informatics rorId

Description

The data was collected in a simulated experiment with the purpose of studying how different types of cybersecurity training impacts users' ability to correctly identify phishing e-mail. For the experiment, an isolated e-mail world was developed and participants were given an inbox containing 5 legitimate e-mails and 6 phishing e-mails. They were asked to assume the persona of the inbox owner and then delete all e-mails they considered to be phishing. They were also asked to “think aloud” during the experiment. Their performance was monitored by an experiment supervisor using an eye tracker and continuous monitoring of the participants screen.

Data contains personal data

No

Language

Method and outcome

Unit of analysis

Study design

Randomised controlled trial (RCT)

Data format / data structure

Data collection
Geographic coverage
Administrative information

Responsible department/unit

School of Informatics

Contributor(s)

Marcus Nohlberg - University of Skövde

Funding

  • Funding agency: The Swedish Post and Telecom Authority
  • Funding agency's reference number: 19-10617
  • Project name on the application: Utveckling av beslutsstöd för användare i riskfyllda situationer online (UBARSO)
Topic and keywords

Research area

Other (CESSDA Topic Classification)

Computer science (Standard för svensk indelning av forskningsämnen 2011)

Information systems (Standard för svensk indelning av forskningsämnen 2011)

Publications
Published: 2022-02-18