Studies
2 studies · CSV
- Phishing in Organizations: Findings from a Large-Scale and Long-Term Study Lain et al. (2022). 2022 IEEE Symposium on Security and Privacy (SP) Embedded training shown after failing a simulation did not make employees more resilient and could even increase susceptibility, while email warnings helped. Employees reporting suspicious emails worked as a fast, sustainable crowd-sourced detection system, with reporters staying active over long periods.
- Cyber security fear appeals: unexpectedly complicated Renaud & Dupuis (2019). Proceedings of the New Security Paradigms Workshop (NSPW '19) A review of the wider fear-appeal literature finds real disagreement over whether fear appeals are helpful or advisable, and wide variation in how cyber security fear-appeal experiments are designed. The authors propose a standard protocol for such studies.