Studies
7 studies · CSV
- A Case Study of Phishing Incident Response in an Educational Organization Althobaiti et al. (2021). Proceedings of the ACM on Human-Computer Interaction (CSCW) Handling phishing reports is a distributed process across several teams, each with narrow system access and knowledge. Sudden large campaigns flooded the help desk with reports, disrupting work and slowing mitigations and reflection.
- Categorizing human phishing difficulty: a Phish Scale Steves et al. (2020). Journal of Cybersecurity Click rates should be expected to vary with how hard a phishing email is for a given audience, especially when its premise fits the recipient's work context. The authors propose the NIST Phish Scale so programs can rate exercise difficulty and interpret click rates.
- Wisecrackers: A theory-grounded investigation of phishing and pretext social engineering threats to information security Workman (2008). Journal of the American Society for Information Science and Technology, 59(4), 662-674 Drawing on marketing-persuasion theory, a field study tested whether the factors that make marketing campaigns work also explain who falls for phishing and pretext phone attacks, and found that they do: dispositional factors tied to persuasion predicted victimization.
- A new look at habits and the habit-goal interface Wood & Neal (2007). Psychological Review, 114(4), 843-863 Habits are learned links between context cues and responses that form through repetition and can then be triggered directly by those cues without the goal that originally drove them. Goals shape habits mainly by motivating the early repetition and by steering people toward cues, rather than by directly activating the habit.
- Psychological Safety and Learning Behavior in Work Teams Edmondson (1999). Administrative Science Quarterly, 44(2) Introduces team psychological safety: a shared belief that it is safe to take interpersonal risks. Psychological safety, not team efficacy, was associated with learning behavior such as seeking feedback and discussing errors, and learning behavior mediated the link to team performance.
- Deciding Advantageously Before Knowing the Advantageous Strategy Bechara et al. (1997). Science, 275(5304), 1293-1295 Healthy participants began choosing advantageously and showed anticipatory skin-conductance responses to risky options before they could explain which strategy was best. Patients with prefrontal damage never developed these signals and kept choosing badly even after knowing the right strategy.
- Self-efficacy: Toward a unifying theory of behavioral change Bandura (1977). Psychological Review, 84(2), 191-215 People's expectations that they can successfully perform a behavior determine whether they try, how hard they work and how long they persist. These efficacy beliefs are built mainly through actual successful performance, and also through watching others, verbal persuasion and emotional arousal.