Developing and evaluating a five minute phishing awareness video

Melanie Volkamer; Karen Renaud; Benjamin Reinheimer; Philipp Rack; Marco Ghiglieri; Peter Mayer; Alexandra Kunz; Nina Gerber

doi:10.1007/978-3-319-98385-1_9

Developing and evaluating a five minute phishing awareness video

Melanie Volkamer, Karen Renaud, Benjamin Reinheimer, Philipp Rack, Marco Ghiglieri, Peter Mayer, Alexandra Kunz, Nina Gerber

Division of Cybersecurity

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

7 Citations (Scopus)

385 Downloads (Pure)

Abstract

Confidence tricksters have always defrauded the unwary. The computer era has merely extended their range and made it possible for them to target anyone in the world who has an email address. Nowadays, they send phishing messages that are specially crafted to deceive. Improving user awareness has the potential to reduce their effectiveness. We have previously developed and empirically-validated phishing awareness programmes. Our programmes are specifically designed to neutralize common phish-related misconceptions and teach people how to detect phishes. Many companies and individuals are already using our programmes, but a persistent niggle has been the amount of time required to complete the awareness programme. This paper reports on how we responded by developing and evaluating a condensed phishing awareness video that delivered phishing awareness more efficiently. Having watched our video, participants in our evaluation were able to detect phishing messages significantly more reliably right after watching the video (compared to before watching the video). This ability was also demonstrated after a retention period of eight weeks after first watching the video.

Original language	English
Title of host publication	Trust, Privacy and Security in Digital Business
Subtitle of host publication	15th International Conference, TrustBus 2018, Regensburg, Germany, September 5–6, 2018, Proceedings
Editors	Steven Furnell, Haralambos Mouratidis, Günther Pernul
Place of Publication	Cham
Publisher	Springer
Pages	119-134
Number of pages	15
ISBN (Electronic)	9783319983851
ISBN (Print)	9783319983844, 3319983849
DOIs	https://doi.org/10.1007/978-3-319-98385-1_9
Publication status	Published - 27 Jul 2018
Event	15th International Conference on Trust, Privacy and Security in Digital Business - University of Regensburg, Regensburg, Germany Duration: 5 Sep 2018 → 6 Sep 2018 Conference number: 15

Publication series

Name	Lecture Notes in Computer Science
Publisher	Springer
Volume	11033
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	15th International Conference on Trust, Privacy and Security in Digital Business
Abbreviated title	TrustBus 2018
Country/Territory	Germany
City	Regensburg
Period	5/09/18 → 6/09/18

Keywords

Phishing awareness
User study
Retention study

Access to Document

10.1007/978-3-319-98385-1_9

Renaud_DevelopingAndEvaluatingAFiveMinutePhishingAwarenessVideo_Author_2018Accepted author manuscript, 284 KB

Cite this

Volkamer, M., Renaud, K., Reinheimer, B., Rack, P., Ghiglieri, M., Mayer, P., Kunz, A., & Gerber, N. (2018). Developing and evaluating a five minute phishing awareness video. In S. Furnell, H. Mouratidis, & G. Pernul (Eds.), Trust, Privacy and Security in Digital Business: 15th International Conference, TrustBus 2018, Regensburg, Germany, September 5–6, 2018, Proceedings (pp. 119-134). (Lecture Notes in Computer Science ; Vol. 11033). Springer. https://doi.org/10.1007/978-3-319-98385-1_9

Volkamer, Melanie ; Renaud, Karen ; Reinheimer, Benjamin et al. / Developing and evaluating a five minute phishing awareness video. Trust, Privacy and Security in Digital Business: 15th International Conference, TrustBus 2018, Regensburg, Germany, September 5–6, 2018, Proceedings. editor / Steven Furnell ; Haralambos Mouratidis ; Günther Pernul. Cham : Springer, 2018. pp. 119-134 (Lecture Notes in Computer Science ).

@inproceedings{36e016de7d6f4672a26de61e5e12cdd6,

title = "Developing and evaluating a five minute phishing awareness video",

abstract = "Confidence tricksters have always defrauded the unwary. The computer era has merely extended their range and made it possible for them to target anyone in the world who has an email address. Nowadays, they send phishing messages that are specially crafted to deceive. Improving user awareness has the potential to reduce their effectiveness. We have previously developed and empirically-validated phishing awareness programmes. Our programmes are specifically designed to neutralize common phish-related misconceptions and teach people how to detect phishes. Many companies and individuals are already using our programmes, but a persistent niggle has been the amount of time required to complete the awareness programme. This paper reports on how we responded by developing and evaluating a condensed phishing awareness video that delivered phishing awareness more efficiently. Having watched our video, participants in our evaluation were able to detect phishing messages significantly more reliably right after watching the video (compared to before watching the video). This ability was also demonstrated after a retention period of eight weeks after first watching the video.",

author = "Melanie Volkamer and Karen Renaud and Benjamin Reinheimer and Philipp Rack and Marco Ghiglieri and Peter Mayer and Alexandra Kunz and Nina Gerber",

year = "2018",

month = jul,

day = "27",

doi = "10.1007/978-3-319-98385-1_9",

language = "English",

isbn = "9783319983844",

series = "Lecture Notes in Computer Science ",

publisher = "Springer",

pages = "119--134",

editor = "Steven Furnell and Haralambos Mouratidis and G{\"u}nther Pernul",

booktitle = "Trust, Privacy and Security in Digital Business",

note = "15th International Conference on Trust, Privacy and Security in Digital Business, TrustBus 2018 ; Conference date: 05-09-2018 Through 06-09-2018",

}

Volkamer, M, Renaud, K, Reinheimer, B, Rack, P, Ghiglieri, M, Mayer, P, Kunz, A & Gerber, N 2018, Developing and evaluating a five minute phishing awareness video. in S Furnell, H Mouratidis & G Pernul (eds), Trust, Privacy and Security in Digital Business: 15th International Conference, TrustBus 2018, Regensburg, Germany, September 5–6, 2018, Proceedings. Lecture Notes in Computer Science , vol. 11033, Springer, Cham, pp. 119-134, 15th International Conference on Trust, Privacy and Security in Digital Business, Regensburg, Germany, 5/09/18. https://doi.org/10.1007/978-3-319-98385-1_9

Developing and evaluating a five minute phishing awareness video. / Volkamer, Melanie; Renaud, Karen; Reinheimer, Benjamin et al.

Trust, Privacy and Security in Digital Business: 15th International Conference, TrustBus 2018, Regensburg, Germany, September 5–6, 2018, Proceedings. ed. / Steven Furnell; Haralambos Mouratidis; Günther Pernul. Cham : Springer, 2018. p. 119-134 (Lecture Notes in Computer Science ; Vol. 11033).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

TY - GEN

T1 - Developing and evaluating a five minute phishing awareness video

AU - Volkamer, Melanie

AU - Renaud, Karen

AU - Reinheimer, Benjamin

AU - Rack, Philipp

AU - Ghiglieri, Marco

AU - Mayer, Peter

AU - Kunz, Alexandra

AU - Gerber, Nina

N1 - Conference code: 15

PY - 2018/7/27

Y1 - 2018/7/27

N2 - Confidence tricksters have always defrauded the unwary. The computer era has merely extended their range and made it possible for them to target anyone in the world who has an email address. Nowadays, they send phishing messages that are specially crafted to deceive. Improving user awareness has the potential to reduce their effectiveness. We have previously developed and empirically-validated phishing awareness programmes. Our programmes are specifically designed to neutralize common phish-related misconceptions and teach people how to detect phishes. Many companies and individuals are already using our programmes, but a persistent niggle has been the amount of time required to complete the awareness programme. This paper reports on how we responded by developing and evaluating a condensed phishing awareness video that delivered phishing awareness more efficiently. Having watched our video, participants in our evaluation were able to detect phishing messages significantly more reliably right after watching the video (compared to before watching the video). This ability was also demonstrated after a retention period of eight weeks after first watching the video.

AB - Confidence tricksters have always defrauded the unwary. The computer era has merely extended their range and made it possible for them to target anyone in the world who has an email address. Nowadays, they send phishing messages that are specially crafted to deceive. Improving user awareness has the potential to reduce their effectiveness. We have previously developed and empirically-validated phishing awareness programmes. Our programmes are specifically designed to neutralize common phish-related misconceptions and teach people how to detect phishes. Many companies and individuals are already using our programmes, but a persistent niggle has been the amount of time required to complete the awareness programme. This paper reports on how we responded by developing and evaluating a condensed phishing awareness video that delivered phishing awareness more efficiently. Having watched our video, participants in our evaluation were able to detect phishing messages significantly more reliably right after watching the video (compared to before watching the video). This ability was also demonstrated after a retention period of eight weeks after first watching the video.

U2 - 10.1007/978-3-319-98385-1_9

DO - 10.1007/978-3-319-98385-1_9

M3 - Conference contribution

SN - 9783319983844

SN - 3319983849

T3 - Lecture Notes in Computer Science

SP - 119

EP - 134

BT - Trust, Privacy and Security in Digital Business

A2 - Furnell, Steven

A2 - Mouratidis, Haralambos

A2 - Pernul, Günther

PB - Springer

CY - Cham

T2 - 15th International Conference on Trust, Privacy and Security in Digital Business

Y2 - 5 September 2018 through 6 September 2018

ER -

Volkamer M, Renaud K, Reinheimer B, Rack P, Ghiglieri M, Mayer P et al. Developing and evaluating a five minute phishing awareness video. In Furnell S, Mouratidis H, Pernul G, editors, Trust, Privacy and Security in Digital Business: 15th International Conference, TrustBus 2018, Regensburg, Germany, September 5–6, 2018, Proceedings. Cham: Springer. 2018. p. 119-134. (Lecture Notes in Computer Science ). Epub 2018 Jul 27. doi: 10.1007/978-3-319-98385-1_9

Developing and evaluating a five minute phishing awareness video

Abstract

Publication series

Conference

Keywords

Access to Document

Fingerprint

Cite this