DIKUL - logo
(UL)
  • Phishing susceptibility across industries [Elektronski vir]
    Mannix, Thea ...
    Research into the human factors of cyber security is becoming increasingly important in helping to understand how human behaviour can be influenced in the modern age of human targeted cyber-attacks. ... Phishing is one of the most prevalent methods used to socially engineer human targets, and as such it is important to establish which factors may influence susceptibility to phishing emails. The majority of research has thus far been dedicated to individual level and semantic factors of susceptibility, while other important issues such as organisational context have been largely absent. This paper explores whether industry type influences behaviours resulting from phishing simulations. Here we present a large sample of real-world data from phishing simulations deployed to employees from banking, education, healthcare and pharmaceutical organisations and construction. Analyses were conducted across multiple potential responses - opening an email, clicking a link, replying to the email, entering data, and reporting the email as suspicious. The results revealed significant differences in susceptibility to phishing depending on which industry type employees belonged to. Consistent with previous work, the banking industry had the fewest number of employees engaged in opening phishing emails and clicking links. Implications for future work and industry professionals are discussed.
    Type of material - conference contribution
    Publish date - 2022
    Language - english
    COBISS.SI-ID - 121005827
    DOI