Den mänskliga faktorn i phishing : När kunskap inte gör skillnad

Sammanfattning

Every day, people are deceived into disclosing sensitive information through a singleclick. Phishing is one of the most common cybersecurity threats today and exploitshuman behavior rather than technical vulnerabilities to mislead individuals, making it arelevant area of study. This study examined how the psychological manipulation techniques of authority,urgency, and fear affect people’s ability to correctly identify phishing emails, andwhether this varies depending on the individual’s self-assessed information securityknowledge, using a quantitative survey study. The data analysis was conducted usingcorrelation analysis followed by logistic regression analysis. The results contradicted expectations based on previous research. The findings showedthat increased perceived urgency and authority were statistically significantly associatedwith an increased likelihood of correctly identifying phishing emails. Self-assessedinformation security knowledge also showed no significant relationship with themanipulation techniques. In conclusion, the results indicate that the manipulation techniques may be identifiableto users under controlled conditions, but that self-assessed knowledge does not explainthe ability to identify phishing emails. These findings may also contribute to thedevelopment of more targeted educational efforts against phishing