Phishing is becoming more prevalent year to year with escalating costs and risks to society. The present study attempts to show a relationship between established anti-phishing training techniques and individual differences that include cognitive abilities and personality factors which could affect the probability of getting phished. At present, a subset of the data from a proposed factorial design has been collected from twenty participants. Preliminary results from a computerized assessment of phishing susceptibility are described using signal detection terminology.
DhamijaR.TygarJ. D. (2005). The battle against phishing: Dynamic security skins. Paper presented at the SOUPS ′05: Proceedings of the 2005 Symposium on Usable Privacy and Security, Pittsburgh, Pennsylvania. 77–88.
3.
DhamijaR.TygarJ. D.HearstM. (2006). Why phishing works. Paper presented at the CHI ′06: Proceedings of the SIGCHI Conference on Human Factors in Computing Systems, Montreal, Quebec, Canada. 581–590.
4.
Gartner, Inc. (2007, December 17). Gartner Survey Shows Phishing Attacks Escalated in 2007; More than $3 Billion Lost to These Attacks. [Press release]. Retrieved from http://www.gartner.com/it/page.jsp?id=565125.
5.
GoldenC. J., (1978). Stroop Color and Word Test. A manual for Clinical and Experimental Uses. Wood Dale, IL: Steelting Company.
6.
GreenS. B. (1991). How many subjects does it take to do A regression analysis. Multivariate Behavioral Research, 26(3), 499–510.
International Personality Item Pool: A Scientific Collaboratory for the Development of Advanced Measures of Personality Traits and Other Individual Differences (http://ipip.ori.org/). Internet Web Site.
9.
Johnson-LairdP. N. (1983). Mental models: Towards a cognitive science of language, inference, and consciousness. Cambridge, Mass.: Harvard University Press.
10.
JoinsonA. N. (2007). Perceived privacy and trust. Unpublished manuscript.
11.
KumaraguruP.RheeY.ShengS.HasanS.AcquistiA.CranorL. (2007). Getting users to pay attention to anti-phishing education: Evaluation of retention and transfer. Paper presented at the ECrime ′07: Proceedings of the Anti-Phishing Working Groups 2nd Annual eCrime Researchers Summit, Pittsburgh, Pennsylvania. 70–81.
12.
KumaraguruP.RheeY.AcquistiA.CranorL.HongJ.NungeE. (2007). Protecting people from phishing: The design and evaluation of an embedded training email system. Paper presented at the CHI ′07: Proceedings of the SIGCHI Conference on Human Factors in Computing Systems, San Jose, California, USA. 905–914.
13.
La PointeL. B.EngleR. (1990). Simple and complex word spans as a measure of working memory capacity. Journal of Experimental Psychology: Learning, Memory, and Cognition, 16, 1118–1133.
14.
LatanéB. (1981). The psychology of social impact. American Psychologist, 36(4), 343–356.
15.
MayhornC. B.StrongeA. J.McLaughlinA. C.RogersW. A. (2004). Older Adults, Computer Training, and The Systems Approach: A Formula For Success. Educational Gerontology, 30(3), 185–203.
16.
MelaraR. D.MountsJ. R. W., (1993). Selective attention to Stroop dimensions: Effects of baseline discriminability, response mode, and practice. Memory and Cognition, 21(5), 627–645.
PotoskyD. (2007). The Internet knowledge (iKnow) measure. Computers in Human Behavior, 23, 2760–2777.
19.
RiegelsbergerJ.SasseM. A.McCarthyJ. D. (2005). The mechanics of trust: A framework for research and design. International Journal of Human-Computer Studies, 62(3), 381–422.
20.
ShengS.MagnienB.KumaraguruP.AcquistiA.CranorL.HongJ. (2007). Anti-phishing phil: The design and evaluation of a game that teaches people not to fall for phish. Paper presented at the SOUPS ′07: Proceedings of the 3rd Symposium on Usable Privacy and Security, Pittsburgh, Pennsylvania. 88–99.
21.
WechslerD. (1997). Wechsler Adult Intelligence Scale III. (3rd Ed.). San Antonio, TX: The Psychological Corporation.
22.
WestR.MayhornC. B.HardeeJ. B.MendelJ. (2008). The Weakest Link: A Psychological Perspective on Why Users Make Poor Security Decisions. In GuptaM.SharmanS. (Eds.), Social and Human Elements of Information Security: Emerging Trends and Countermeasures (pp. 43–60). Hershey, PA: Idea Group Inc.
23.
WogalterM. S.MayhornC. B. (2008). Trusting the internet: Cues affecting perceived credibility. International Journal of Technology and Human Interaction, 4(1), 76–94.
24.
ZhangY.EgelmanS.CranorL.HongJ. (2007). Phinding phish: Evaluating anti-phishing tools. Paper presented at the Proceedings of the 14th Annual Network and Distributed System Security Symposium (NDSS 2007).
