Getting users to pay attention to anti-phishing education: evaluation of retention and transfer

185 citations recorded by the source corpus.

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

PhishEye: Live Monitoring of Sandboxed Phishing Kits (2016, background): “Our study presents accurate measurements of the duration and effectiveness of this popular threat, and discusses many new and interesting aspects we observed by monitoring hundreds of phishing campaigns.”
Teaching Johnny not to fall for phish (2010, methodology): “In this section, we present the results of a study looking at (1) how well PhishGuru users can retain and transfer knowledge, and (2) how important it is to fall for simulated phishing attacks, as opposed to simply getting PhishGuru interventions directly as email messages [Kumaraguru et al. 2007b].”
Anti-Phishing Landing Page : Turning a 404 into a Teachable Moment for End Users (2009, unknown): “In another laboratory study we found that our PhishGuru cartoon was an effective training mechanism when sent as part of an embedded training message, but not when sent directly via email [12].”
Security awareness of computer users: A phishing threat avoidance perspective (2014, background): “Previous research has revealed that well-designed user security education can be effective (Kumaraguru et al., 2007a,b; Sheng et al., 2007).”