Informing, simulating experience, or both : A field experiment on phishing risks - Archive ouverte HAL Accéder directement au contenu
Article Dans Une Revue PLoS ONE Année : 2019

Informing, simulating experience, or both : A field experiment on phishing risks

Résumé

Cybersecurity cannot be ensured with mere technical solutions. Hackers often use fraudulent emails to simply ask people for their password to breach into organizations. This technique, called phishing, is a major threat for many organizations. A typical prevention measure is to inform employees but is there a better way to reduce phishing risks? Experience and feedback have often been claimed to be effective in helping people make better decisions. In a large field experiment involving more than 10,000 employees of a Dutch ministry, we tested the effect of information provision, simulated experience, and their combination to reduce the risks of falling into a phishing attack. Both approaches substantially reduced the proportion of employees giving away their password. Combining both interventions did not have a larger impact.
Fichier principal
Vignette du fichier
737004-Informing-simulating-experience-or-both.pdf (862.85 Ko) Télécharger le fichier
Origine : Fichiers éditeurs autorisés sur une archive ouverte

Dates et versions

hal-04325609 , version 1 (06-12-2023)

Identifiants

Citer

Aurélien Baillon, Jeroen de Bruin, Aysil Emirmahmutoglu, Evelien van de Veer, Bram van Dijk. Informing, simulating experience, or both : A field experiment on phishing risks. PLoS ONE, 2019, 14 (12), 15 p. ⟨10.1371/journal.pone.0224216⟩. ⟨hal-04325609⟩
11 Consultations
2 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More