The interdisciplinarity of the Social Engineering (SE) domain creates crucial challenges for
the development and advancement of empirical SE research, making it particularly difficult to …

Security awareness and education programmes are rolled out in more and more
organisations. However, their effectiveness over time and, correspondingly, appropriate …

There has recently been an upsurge of interest in the deployment of behavioural economics
techniques in the information security and privacy domain. In this paper, we consider the …

Phishing is one of the biggest security threats to organizations. Anti-phishing awareness
measures can improve phishing email detection rates. These measures need to be efficient …

Uniform Resource Locators (URLs) unambiguously specify host identity on the web. URLs
are syntactically complex, and although software can accurately parse identity from URLs …

Phishing warning researchers have proposed two forms of hyperlink restrictions for reducing
phishing click-through rates: focused attention, which prevents users from proceeding to a …

Confidence tricksters have always defrauded the unwary. The computer era has merely
extended their range and made it possible for them to target anyone in the world who has an …

QR codes, designed for convenient access to links, have recently been appropriated as
phishing attack vectors. As this type of phishing is relatively and many aspects of the threat …

Despite technical advances in anti-phishing protection, in many cases the detection of
phishing URLs largely depends on users manually inspecting the links found in suspicious …

Phishing is a danger to both private users and businesses. Industry and academia have
proposed several approaches to deal with this threat, many of which developed with a …