| Title: |
Alpha Phi-Shing Fraternity: Phishing Assessment in a Higher Education Institution |
| Language: |
English |
| Authors: |
Casagrande, Marco; Conti, Mauro; Fedeli, Monica; Losiouk, Eleonora |
| Source: |
Journal of Cybersecurity Education, Research and Practice. Jan 2023 2022(2). |
| Availability: |
Kennesaw State University. 1000 Chastain Road, Kennesaw, Georgia 30144. Tel: 470-578-3568; e-mail: cybersec@kennesaw.edu; Web site: https://digitalcommons.kennesaw.edu/jcerp/ |
| Peer Reviewed: |
Y |
| Page Count: |
30 |
| Publication Date: |
2023 |
| Document Type: |
Journal Articles; Reports - Research |
| Education Level: |
Higher Education; Postsecondary Education |
| Descriptors: |
Fraternities; Computer Security; Information Security; Higher Education; Universities; Electronic Mail; Web Sites; Data Collection; Crime; Users (Information); College Students; College Faculty; Foreign Countries; Deception |
| Geographic Terms: |
Italy |
| ISSN: |
2472-2707 |
| Abstract: |
Phishing is a common social engineering attack aimed to steal personal information. Universities attract phishing attacks because: (1) they store employees and students sensitive data; (2) they save confidential documents; and (3) their infrastructures often lack security. In this paper, we showcase a phishing assessment at the University of Redacted aimed to identify the people, and the features of such people, that are more susceptible to phishing attacks. We delivered phishing emails to 1.508 subjects in three separate batches, collecting a clickrate equal to 30%, 11% and 13%, respectively. We considered several features (i.e., age, gender, role, working/studying field, email template) in univariate and multivariate analyses and found that students are more susceptible to phishing attacks than professors or technical/administrative staff, and that emails designed through a spearphishing approach receive a highest clickrate. We believe this work provides the foundations for setting up an effective educational campaign to prevent phishing attacks not only at the University of Redacted, but in any other university |
| Abstractor: |
As Provided |
| Entry Date: |
2023 |
| Accession Number: |
EJ1387210 |
| Database: |
ERIC |