Reviewing cyber security social engineering training and awareness programs—Pitfalls and ongoing issues

H Aldawood, G Skinner - Future internet, 2019 - mdpi.com
The idea and perception of good cyber security protection remains at the forefront of many
organizations' information and communication technology strategy and investment …

[HTML][HTML] Exploring the evidence for email phishing training: A scoping review

N Marshall, D Sturman, JC Auton - Computers & Security, 2024 - Elsevier
Background Phishing emails are a pervasive threat to the security of confidential
information. To mitigate this risk, a range of training measures have been developed to …

The human aspects of information security questionnaire (HAIS-Q): two further validation studies

K Parsons, D Calic, M Pattinson, M Butavicius… - Computers & …, 2017 - Elsevier
Abstract Information security awareness (ISA) is integral to protecting an organisation from
cyber threats. The aim of this paper is to further establish the validity of the Human Aspects …

Social engineering in cybersecurity: Effect mechanisms, human vulnerabilities and attack methods

Z Wang, H Zhu, L Sun - Ieee Access, 2021 - ieeexplore.ieee.org
Social engineering attacks have posed a serious security threat to cyberspace. However,
there is much we have yet to know regarding what and how lead to the success of social …

[HTML][HTML] Exploring susceptibility to phishing in the workplace

EJ Williams, J Hinds, AN Joinson - International Journal of Human …, 2018 - Elsevier
Phishing emails provide a means to infiltrate the technical systems of organisations by
encouraging employees to click on malicious links or attachments. Despite the use of …

Susceptibility to spear-phishing emails: Effects of internet user demographics and email content

T Lin, DE Capecci, DM Ellis, HA Rocha… - ACM Transactions on …, 2019 - dl.acm.org
Phishing is fundamental to cyber attacks. This research determined the effect of Internet user
age and email content such as weapons of influence (persuasive techniques that attackers …

Got phished? Internet security and human vulnerability

S Goel, K Williams, E Dincelli - Journal of the Association for …, 2017 - aisel.aisnet.org
A leading cause of security breaches is a basic human vulnerability: our susceptibility to
deception. Hackers exploit this vulnerability by sending phishing emails that induce users to …

An investigation of phishing awareness and education over time: When and how to best remind users

B Reinheimer, L Aldag, P Mayer, M Mossano… - … Symposium on Usable …, 2020 - usenix.org
Security awareness and education programmes are rolled out in more and more
organisations. However, their effectiveness over time and, correspondingly, appropriate …

Evaluating organizational phishing awareness training on an enterprise scale

D Hillman, Y Harel, E Toch - Computers & Security, 2023 - Elsevier
Employees are often the victims of phishing attacks, posing a threat to both themselves and
their organizations. In response, organizations are dedicating resources, time, and …

Susceptibility to phishing on social network sites: A personality information processing model

ED Frauenstein, S Flowerday - Computers & security, 2020 - Elsevier
Today, the traditional approach used to conduct phishing attacks through email and spoofed
websites has evolved to include social network sites (SNSs). This is because phishers are …