School of phish: a real-world evaluation of anti-phishing training

By Ponnurangam Kumaraguru, Justin Cranshaw, Alessandro Acquisti, Lorrie Faith Cranor, Jason I. Hong, Mary Ann Blair, T. Pham. Symposium On Usable Privacy and Security, 2009

347 citations recorded by the source corpus.

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

Anti-Phishing Landing Page : Turning a 404 into a Teachable Moment for End Users (2009, positive): “In another real-world PhishGuru study, we showed (1) users trained with PhishGuru retain knowledge even after 28 days; (2) adding a second training message to reinforce the original training decreases the likelihood of people giving information to phishing websites; and (3) training does not decreas”
An Empirical Analysis of Phishing Blacklists (2009, background): “They found that 2 hours after the phishing emails were sent, at least half the people who would eventually click on the phishing link had already done so; after 8 hours, nearly everyone (90%) who would click had already done so [ 19 ].”
Who falls for phish?: a demographic analysis of phishing susceptibility and effectiveness of interventions (2010, methodology): “A follow-up study showed that people were able to retain what they learned from this training [18].”