Studies

Teaching Johnny not to fall for phish

Kumaraguru et al. — ACM Transactions on Internet Technology

Embedded email-based training (PhishGuru) and a game (Anti-Phishing Phil) built on learning-science principles improved users' ability to recognize phishing. The authors frame user education as a complement to automated detection, noting that users are unmotivated and that training can raise false alarms on legitimate messages.