EAGER: DCL: SaTC: Enabling Interdisciplinary Collaboration: Inoculation vs. education: the role of real time alerts and end-user overconfidence

EAGER：DCL：SaTC：实现跨学科协作：接种与教育：实时警报和最终用户过度自信的作用

• 批准号: 2210198
• 负责人: Daniel Jones
• 金额: $ 29.99万
• 依托单位: Board of Regents, NSHE, obo University of Nevada, Reno
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2022
• 资助国家: 美国
• 起止时间: 2022-07-01 至 2024-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2210198&HistoricalAwards=false
• 关键词: EAGER; DCL; SaTC; Enabling; Interdisciplinary

Phishing is increasingly problematic in today’s society. Phishing vulnerability is not limited to inexperienced persons. Even those with technological training fall victim to phishing attacks. The research question to be addressed in this project is whether inexperienced people and experts fall victim to phishing for different reasons, and if so, how those different sources of vulnerability might be addressed. Uncertainty and overconfidence, respectively, may characterize the phishing vulnerabilities of persons with less versus more computer literacy. The project team is studying phishing vulnerabilities, testing whether they characterize people with different expertise and confidence, and deploying interventions designed to address differently-caused phishing vulnerabilities. The main interventions to be evaluated include psychological inoculation, whereby people are exposed to repeated, weakened, and harmless phishing experiences, and educational techniques in the form of anti-phishing instructions. The first stage in the project is testing, through controlled experiments, whether people with varying computer literacy, and varying confidence, differ in their approach to phishing avoidance. The next stage is to study the impact of different interventions, including variations on psychological inoculation and anti-phishing instructions, and test how those interventions are associated with persons who vary in their expertise and confidence. A third step will be to develop and evaluate alerts that could be triggered by potential phishing attacks. The identification of at-risk people who could benefit from inoculation training or specialized instruction has the potential for mitigating phishing and many other kinds of attacks on people. A diverse set of students will be involved in the research.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

网络钓鱼在当今社会日益成为问题。网络钓鱼漏洞不仅限于没有经验的人，即使是那些受过技术培训的人也会成为网络钓鱼攻击的受害者。本项目要解决的研究问题是，没有经验的人和专家是否会因不同的原因而成为网络钓鱼的受害者。 ，如果是这样，如何解决这些不同的漏洞来源可能分别是计算机知识较少和较多的人的网络钓鱼漏洞的特征。研究网络钓鱼漏洞，测试它们是否表征具有不同专业知识和信心的人，并部署旨在解决不同原因的网络钓鱼漏洞的干预措施。要评估的主要干预措施包括心理预防，因此人们会遭受重复的、削弱的和无害的网络钓鱼体验。以及反网络钓鱼指令形式的教育技术 该项目的第一阶段是通过受控实验来测试具有不同计算机知识和不同信心的人们对待网络钓鱼的方法是否有所不同。下一阶段是研究不同干预措施的影响，包括心理预防和反网络钓鱼指示的变化，并测试这些干预措施与不同专业知识和信心的人的关系。评估可能由潜在网络钓鱼攻击触发的警报 识别可从接种培训或专门指导中受益的高危人群有可能减少网络钓鱼和许多其他类型的针对人们的攻击。在该奖项反映了 NSF 的法定使命，并通过使用基金会的智力价值和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

Data Quality and Linguistic Cues for Domain-independent Deception Detection

用于独立于领域的欺骗检测的数据质量和语言线索

• DOI: 10.1109/bdcat56447.2022.00042
• 发表时间: 2022-12
• 期刊: Applications and Technologies (BDCAT
• 作者: Hanks, Casey;Verma, Rakesh M.
• 通讯作者: Verma, Rakesh M.