论文标题
使用信号检测理论量化在高中环境中矛式网络钓鱼的敏感性
Quantifying Susceptibility to Spear Phishing in a High School Environment Using Signal Detection Theory
论文作者
论文摘要
长矛网络钓鱼是一种欺骗性的攻击,它利用社会工程通过有针对性的受害来获取机密信息。它的特点是使用社会提示和个性化信息来针对特定的受害者。先前关于弹性网络钓鱼的韧性的工作重点是便利样本,对学生的关注不成比例。相比之下,在这里,我们报告了对高中社区的评估。我们聘请了57名高中生和教职员工(12名高中生,45名员工),作为利用信号检测理论(SDT)的研究参与者。通过基于方案的分析,参与者的任务是区分网络钓鱼电子邮件和真实的电子邮件。结果表明,无论参与者的技术背景如何,参与者的自我检测过度自信偏见。这些发现对于评估代表性不足的人群的决策和通过检查人类敏感性来保护人们免受潜在的长矛网络钓鱼攻击至关重要。
Spear phishing is a deceptive attack that uses social engineering to obtain confidential information through targeted victimization. It is distinguished by its use of social cues and personalized information to target specific victims. Previous work on resilience to spear phishing has focused on convenience samples, with a disproportionate focus on students. In contrast, here, we report on an evaluation of a high school community. We engaged 57 high school students and faculty members (12 high school students, 45 staff members) as participants in research utilizing signal detection theory (SDT). Through scenario-based analysis, participants tasked with distinguishing phishing emails from authentic emails. The results revealed an overconfidence bias in self-detection from the participants, regardless of their technical background. These findings are critical for evaluating the decision-making of underrepresented populations and protecting people from potential spear phishing attacks by examining human susceptibility.