Phish and tips: phishing awareness and education for older adults

Stella Kazamia; Chris  Culnane; Daniel Gardham; Suzanne Prior; Helen Treharne

Phish and tips: phishing awareness and education for older adults

Stella Kazamia^*, Chris Culnane, Daniel Gardham, Suzanne Prior, Helen Treharne

^*Corresponding author for this work

Department of Cybersecurity and Computing

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Abstract

Older adults are particularly vulnerable to phishing attacks. Gamification has been shown to be less effective to develop confidence in distinguishing between genuine and phishing emails in this demographic. To overcome this, we present our novel, open source interactive training platform, Phish&Tips, based on a simulated inbox. Our multi-analysis approach provides comprehensive data that enables us to compare participant’s self-assessed competence with their performance on the training platform. We present results based on pre- and post-training surveys, focus groups and the analysis of the training platform data (N = 37). Over half the participants demonstrated an improved understanding of various detection strategies and an increase in confidence in being able to interpret emails. However, these results were not evident in the analysis of the platform data. This disparity between participants’ perceived knowledge and their performance on the platform highlights the challenges of applying their knowledge effectively.

Original language	English
Title of host publication	Human Aspects of Information Security and Assurance
Subtitle of host publication	18th IFIP WG 11.12 International Symposium, HAISA 2024, Skövde, Sweden, July 9–11, 2024, Proceedings, Part II
Editors	Nathan Clarke, Steven Furnell
Place of Publication	Cham
Publisher	Springer
ISBN (Electronic)	9783031725630
ISBN (Print)	9783031725623, 9783031725654
Publication status	Accepted/In press - 29 May 2024
Event	18th International Symposium on Human Aspects of Information Security & Assurance - University of Skövde, Skövde, Sweden Duration: 9 Jul 2024 → 11 Jul 2024 Conference number: 18th

Publication series

Name	IFIP Advances in Information and Communication Technology (IFIPAICT)
Publisher	Springer
Volume	722
ISSN (Print)	1868-4238
ISSN (Electronic)	1868-422X

Conference

Conference	18th International Symposium on Human Aspects of Information Security & Assurance
Abbreviated title	HAISA 2024
Country/Territory	Sweden
City	Skövde
Period	9/07/24 → 11/07/24

Cite this

Kazamia, S., Culnane, C., Gardham, D., Prior, S., & Treharne, H. (Accepted/In press). Phish and tips: phishing awareness and education for older adults. In N. Clarke, & S. Furnell (Eds.), Human Aspects of Information Security and Assurance: 18th IFIP WG 11.12 International Symposium, HAISA 2024, Skövde, Sweden, July 9–11, 2024, Proceedings, Part II (IFIP Advances in Information and Communication Technology (IFIPAICT); Vol. 722). Springer.

Kazamia, Stella ; Culnane, Chris ; Gardham, Daniel et al. / Phish and tips : phishing awareness and education for older adults. Human Aspects of Information Security and Assurance: 18th IFIP WG 11.12 International Symposium, HAISA 2024, Skövde, Sweden, July 9–11, 2024, Proceedings, Part II. editor / Nathan Clarke ; Steven Furnell. Cham : Springer, 2024. (IFIP Advances in Information and Communication Technology (IFIPAICT)).

@inproceedings{0a0a8388262c4a71955f958d6bb1c0aa,

title = "Phish and tips: phishing awareness and education for older adults",

abstract = "Older adults are particularly vulnerable to phishing attacks. Gamification has been shown to be less effective to develop confidence in distinguishing between genuine and phishing emails in this demographic. To overcome this, we present our novel, open source interactive training platform, Phish&Tips, based on a simulated inbox. Our multi-analysis approach provides comprehensive data that enables us to compare participant{\textquoteright}s self-assessed competence with their performance on the training platform. We present results based on pre- and post-training surveys, focus groups and the analysis of the training platform data (N = 37). Over half the participants demonstrated an improved understanding of various detection strategies and an increase in confidence in being able to interpret emails. However, these results were not evident in the analysis of the platform data. This disparity between participants{\textquoteright} perceived knowledge and their performance on the platform highlights the challenges of applying their knowledge effectively.",

author = "Stella Kazamia and Chris Culnane and Daniel Gardham and Suzanne Prior and Helen Treharne",

year = "2024",

month = may,

day = "29",

language = "English",

isbn = "9783031725623",

series = "IFIP Advances in Information and Communication Technology (IFIPAICT)",

publisher = "Springer",

editor = "Nathan Clarke and Steven Furnell",

booktitle = "Human Aspects of Information Security and Assurance",

note = "18th International Symposium on Human Aspects of Information Security & Assurance, HAISA 2024 ; Conference date: 09-07-2024 Through 11-07-2024",

}

Kazamia, S, Culnane, C, Gardham, D, Prior, S & Treharne, H 2024, Phish and tips: phishing awareness and education for older adults. in N Clarke & S Furnell (eds), Human Aspects of Information Security and Assurance: 18th IFIP WG 11.12 International Symposium, HAISA 2024, Skövde, Sweden, July 9–11, 2024, Proceedings, Part II. IFIP Advances in Information and Communication Technology (IFIPAICT), vol. 722, Springer, Cham, 18th International Symposium on Human Aspects of Information Security & Assurance, Skövde, Sweden, 9/07/24.

Phish and tips: phishing awareness and education for older adults. / Kazamia, Stella; Culnane, Chris ; Gardham, Daniel et al.
Human Aspects of Information Security and Assurance: 18th IFIP WG 11.12 International Symposium, HAISA 2024, Skövde, Sweden, July 9–11, 2024, Proceedings, Part II. ed. / Nathan Clarke; Steven Furnell. Cham: Springer, 2024. (IFIP Advances in Information and Communication Technology (IFIPAICT); Vol. 722).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

TY - GEN

T1 - Phish and tips

T2 - 18th International Symposium on Human Aspects of Information Security & Assurance

AU - Kazamia, Stella

AU - Culnane, Chris

AU - Gardham, Daniel

AU - Prior, Suzanne

AU - Treharne, Helen

N1 - Conference code: 18th

PY - 2024/5/29

Y1 - 2024/5/29

N2 - Older adults are particularly vulnerable to phishing attacks. Gamification has been shown to be less effective to develop confidence in distinguishing between genuine and phishing emails in this demographic. To overcome this, we present our novel, open source interactive training platform, Phish&Tips, based on a simulated inbox. Our multi-analysis approach provides comprehensive data that enables us to compare participant’s self-assessed competence with their performance on the training platform. We present results based on pre- and post-training surveys, focus groups and the analysis of the training platform data (N = 37). Over half the participants demonstrated an improved understanding of various detection strategies and an increase in confidence in being able to interpret emails. However, these results were not evident in the analysis of the platform data. This disparity between participants’ perceived knowledge and their performance on the platform highlights the challenges of applying their knowledge effectively.

AB - Older adults are particularly vulnerable to phishing attacks. Gamification has been shown to be less effective to develop confidence in distinguishing between genuine and phishing emails in this demographic. To overcome this, we present our novel, open source interactive training platform, Phish&Tips, based on a simulated inbox. Our multi-analysis approach provides comprehensive data that enables us to compare participant’s self-assessed competence with their performance on the training platform. We present results based on pre- and post-training surveys, focus groups and the analysis of the training platform data (N = 37). Over half the participants demonstrated an improved understanding of various detection strategies and an increase in confidence in being able to interpret emails. However, these results were not evident in the analysis of the platform data. This disparity between participants’ perceived knowledge and their performance on the platform highlights the challenges of applying their knowledge effectively.

UR - https://link.springer.com/book/9783031725623

M3 - Conference contribution

SN - 9783031725623

SN - 9783031725654

T3 - IFIP Advances in Information and Communication Technology (IFIPAICT)

BT - Human Aspects of Information Security and Assurance

A2 - Clarke, Nathan

A2 - Furnell, Steven

PB - Springer

CY - Cham

Y2 - 9 July 2024 through 11 July 2024

ER -

Kazamia S, Culnane C, Gardham D, Prior S, Treharne H. Phish and tips: phishing awareness and education for older adults. In Clarke N, Furnell S, editors, Human Aspects of Information Security and Assurance: 18th IFIP WG 11.12 International Symposium, HAISA 2024, Skövde, Sweden, July 9–11, 2024, Proceedings, Part II. Cham: Springer. 2024. (IFIP Advances in Information and Communication Technology (IFIPAICT)).

Phish and tips: phishing awareness and education for older adults

Abstract

Publication series

Conference

Other files and links

Fingerprint

Cite this