Designing ethical phishing experiments: a study of (ROT13) rOnl query features

144 citations recorded by the source corpus.

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

PhishEye: Live Monitoring of Sandboxed Phishing Kits (2016, background): “propose ethical phishing experiments on a popular online auction website [19], in order to measure the success rate of simulated phishing emails.”
The Emperor's New Security Indicators (2007, methodology): “Jakobsson and Ratkiewicz used the features of an online auction website to send simulated phishing emails to that site’s members [ 12 ].”
Protecting people from phishing: the design and evaluation of an embedded training email system (2007, background): “1 Although questions have been raised about the ethics of such deceptive approaches to educating users and studying the effectiveness of phishing attacks, the general consensus among the phishing research community seems to be that such studies are ethical when conducted with the approval of the app”
A Practical Attack to De-anonymize Social Network Users (2010, background): “in [18], [19], we believe that realistic experiments are the only way to reliably estimate success rates of attacks in the real-world.”