Decision strategies and susceptibility to phishing

摘要: Phishing emails are semantic attacks that con people into divulging sensitive information using techniques to make the user believe is being requested by a legitimate source. In order develop tools will be effective in combating these schemes, we first must know how and why fall for them. This study reports preliminary analysis of interviews with 20 non-expert computer users reveal their strategies understand decisions when encountering possibly suspicious emails. One reasons may vulnerable phishing schemes awareness risks not linked perceived vulnerability or useful identifying Rather, our data suggest can manage they most familiar with, but don't appear extrapolate wary unfamiliar risks. We explore several use, varying degrees success, evaluating making sense warnings offered browsers attempting help navigate web.