Developing and evaluating a five minute phishing awareness video

Melanie Volkamer, Karen Renaud, Benjamin Reinheimer, Philipp Rack, Marco Ghiglieri, Peter Mayer, Alexandra Kunz, Nina Gerber

Research output: Chapter in Book/Report/Conference proceedingConference contribution

132 Downloads (Pure)

Abstract

Confidence tricksters have always defrauded the unwary. The computer era has merely extended their range and made it possible for them to target anyone in the world who has an email address. Nowadays, they send phishing messages that are specially crafted to deceive. Improving user awareness has the potential to reduce their effectiveness. We have previously developed and empirically-validated phishing awareness programmes. Our programmes are specifically designed to neutralize common phish-related misconceptions and teach people how to detect phishes. Many companies and individuals are already using our programmes, but a persistent niggle has been the amount of time required to complete the awareness programme. This paper reports on how we responded by developing and evaluating a condensed phishing awareness video that delivered phishing awareness more efficiently. Having watched our video, participants in our evaluation were able to detect phishing messages significantly more reliably right after watching the video (compared to before watching the video). This ability was also demonstrated after a retention period of eight weeks after first watching the video.
Original languageEnglish
Title of host publicationTrust, Privacy and Security in Digital Business
Subtitle of host publication15th International Conference, TrustBus 2018, Regensburg, Germany, September 5–6, 2018, Proceedings
EditorsSteven Furnell, Haralambos Mouratidis, Günther Pernul
Place of PublicationCham
PublisherSpringer Nature
Pages119-134
Number of pages15
ISBN (Electronic)9783319983851
ISBN (Print)9783319983844, 3319983849
DOIs
Publication statusPublished - 27 Jul 2018
Event15th International Conference on Trust, Privacy and Security in Digital Business - University of Regensburg, Regensburg, Germany
Duration: 5 Sep 20186 Sep 2018
Conference number: 15

Publication series

NameLecture Notes in Computer Science
PublisherSpringer Nature
Volume11033

Conference

Conference15th International Conference on Trust, Privacy and Security in Digital Business
Abbreviated titleTrustBus 2018
CountryGermany
CityRegensburg
Period5/09/186/09/18

Fingerprint

Electronic mail
Industry

Cite this

Volkamer, M., Renaud, K., Reinheimer, B., Rack, P., Ghiglieri, M., Mayer, P., ... Gerber, N. (2018). Developing and evaluating a five minute phishing awareness video. In S. Furnell, H. Mouratidis, & G. Pernul (Eds.), Trust, Privacy and Security in Digital Business: 15th International Conference, TrustBus 2018, Regensburg, Germany, September 5–6, 2018, Proceedings (pp. 119-134). (Lecture Notes in Computer Science ; Vol. 11033). Cham: Springer Nature. https://doi.org/10.1007/978-3-319-98385-1_9
Volkamer, Melanie ; Renaud, Karen ; Reinheimer, Benjamin ; Rack, Philipp ; Ghiglieri, Marco ; Mayer, Peter ; Kunz, Alexandra ; Gerber, Nina. / Developing and evaluating a five minute phishing awareness video. Trust, Privacy and Security in Digital Business: 15th International Conference, TrustBus 2018, Regensburg, Germany, September 5–6, 2018, Proceedings. editor / Steven Furnell ; Haralambos Mouratidis ; Günther Pernul. Cham : Springer Nature, 2018. pp. 119-134 (Lecture Notes in Computer Science ).
@inproceedings{36e016de7d6f4672a26de61e5e12cdd6,
title = "Developing and evaluating a five minute phishing awareness video",
abstract = "Confidence tricksters have always defrauded the unwary. The computer era has merely extended their range and made it possible for them to target anyone in the world who has an email address. Nowadays, they send phishing messages that are specially crafted to deceive. Improving user awareness has the potential to reduce their effectiveness. We have previously developed and empirically-validated phishing awareness programmes. Our programmes are specifically designed to neutralize common phish-related misconceptions and teach people how to detect phishes. Many companies and individuals are already using our programmes, but a persistent niggle has been the amount of time required to complete the awareness programme. This paper reports on how we responded by developing and evaluating a condensed phishing awareness video that delivered phishing awareness more efficiently. Having watched our video, participants in our evaluation were able to detect phishing messages significantly more reliably right after watching the video (compared to before watching the video). This ability was also demonstrated after a retention period of eight weeks after first watching the video.",
author = "Melanie Volkamer and Karen Renaud and Benjamin Reinheimer and Philipp Rack and Marco Ghiglieri and Peter Mayer and Alexandra Kunz and Nina Gerber",
year = "2018",
month = "7",
day = "27",
doi = "10.1007/978-3-319-98385-1_9",
language = "English",
isbn = "9783319983844",
series = "Lecture Notes in Computer Science",
publisher = "Springer Nature",
pages = "119--134",
editor = "Steven Furnell and Haralambos Mouratidis and G{\"u}nther Pernul",
booktitle = "Trust, Privacy and Security in Digital Business",

}

Volkamer, M, Renaud, K, Reinheimer, B, Rack, P, Ghiglieri, M, Mayer, P, Kunz, A & Gerber, N 2018, Developing and evaluating a five minute phishing awareness video. in S Furnell, H Mouratidis & G Pernul (eds), Trust, Privacy and Security in Digital Business: 15th International Conference, TrustBus 2018, Regensburg, Germany, September 5–6, 2018, Proceedings. Lecture Notes in Computer Science , vol. 11033, Springer Nature, Cham, pp. 119-134, 15th International Conference on Trust, Privacy and Security in Digital Business, Regensburg, Germany, 5/09/18. https://doi.org/10.1007/978-3-319-98385-1_9

Developing and evaluating a five minute phishing awareness video. / Volkamer, Melanie; Renaud, Karen; Reinheimer, Benjamin; Rack, Philipp; Ghiglieri, Marco; Mayer, Peter; Kunz, Alexandra; Gerber, Nina.

Trust, Privacy and Security in Digital Business: 15th International Conference, TrustBus 2018, Regensburg, Germany, September 5–6, 2018, Proceedings. ed. / Steven Furnell; Haralambos Mouratidis; Günther Pernul. Cham : Springer Nature, 2018. p. 119-134 (Lecture Notes in Computer Science ; Vol. 11033).

Research output: Chapter in Book/Report/Conference proceedingConference contribution

TY - GEN

T1 - Developing and evaluating a five minute phishing awareness video

AU - Volkamer, Melanie

AU - Renaud, Karen

AU - Reinheimer, Benjamin

AU - Rack, Philipp

AU - Ghiglieri, Marco

AU - Mayer, Peter

AU - Kunz, Alexandra

AU - Gerber, Nina

PY - 2018/7/27

Y1 - 2018/7/27

N2 - Confidence tricksters have always defrauded the unwary. The computer era has merely extended their range and made it possible for them to target anyone in the world who has an email address. Nowadays, they send phishing messages that are specially crafted to deceive. Improving user awareness has the potential to reduce their effectiveness. We have previously developed and empirically-validated phishing awareness programmes. Our programmes are specifically designed to neutralize common phish-related misconceptions and teach people how to detect phishes. Many companies and individuals are already using our programmes, but a persistent niggle has been the amount of time required to complete the awareness programme. This paper reports on how we responded by developing and evaluating a condensed phishing awareness video that delivered phishing awareness more efficiently. Having watched our video, participants in our evaluation were able to detect phishing messages significantly more reliably right after watching the video (compared to before watching the video). This ability was also demonstrated after a retention period of eight weeks after first watching the video.

AB - Confidence tricksters have always defrauded the unwary. The computer era has merely extended their range and made it possible for them to target anyone in the world who has an email address. Nowadays, they send phishing messages that are specially crafted to deceive. Improving user awareness has the potential to reduce their effectiveness. We have previously developed and empirically-validated phishing awareness programmes. Our programmes are specifically designed to neutralize common phish-related misconceptions and teach people how to detect phishes. Many companies and individuals are already using our programmes, but a persistent niggle has been the amount of time required to complete the awareness programme. This paper reports on how we responded by developing and evaluating a condensed phishing awareness video that delivered phishing awareness more efficiently. Having watched our video, participants in our evaluation were able to detect phishing messages significantly more reliably right after watching the video (compared to before watching the video). This ability was also demonstrated after a retention period of eight weeks after first watching the video.

U2 - 10.1007/978-3-319-98385-1_9

DO - 10.1007/978-3-319-98385-1_9

M3 - Conference contribution

SN - 9783319983844

SN - 3319983849

T3 - Lecture Notes in Computer Science

SP - 119

EP - 134

BT - Trust, Privacy and Security in Digital Business

A2 - Furnell, Steven

A2 - Mouratidis, Haralambos

A2 - Pernul, Günther

PB - Springer Nature

CY - Cham

ER -

Volkamer M, Renaud K, Reinheimer B, Rack P, Ghiglieri M, Mayer P et al. Developing and evaluating a five minute phishing awareness video. In Furnell S, Mouratidis H, Pernul G, editors, Trust, Privacy and Security in Digital Business: 15th International Conference, TrustBus 2018, Regensburg, Germany, September 5–6, 2018, Proceedings. Cham: Springer Nature. 2018. p. 119-134. (Lecture Notes in Computer Science ). https://doi.org/10.1007/978-3-319-98385-1_9