.png){kind=icon}
返回
Improving Phishing Reporting Using Security Gamification
.png){kind=icon}
PRE
AI
DOI：10.1080/07421222.2022.2096551.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Phishing is an increasing threat that causes billions in losses and damage to productivity, trade secrets, and reputations each year. This work explores how security gamification techniques can improve phishing reporting. We contextualized the cognitive evaluation theory (CET) as a kernel theory and constructed a prototype phishing reporting system. With three experiments in a simulated work setting, we tested gamification elements of validation, attribution, incentives, and public presentation for improvements in experiential (e.g., motivation) and instrumental outcomes (e.g., hits and false positives) in phishing reporting. Our findings suggest public attribution with rewards and punishments best balance the competing necessities of accuracy with widespread reporting. Furthermore, our results demonstrate the unique benefits of security gamification to phishing reporting over and above other phishing mitigation techniques (e.g., training and warnings). However, we also noted that unintended consequences in false alarms might arise from shifts in motivation resulting from public display of incentives. These findings suggest that carefully calibrated external incentives (rather than intrinsic rewards) are most likely to improve the ancillary task of phishing reporting.
Keyword:
Phishing
leaderboards
cognitive evaluation theory
online gamification
security gamification
phishing reporting
incentives
期刊
I
IF:
8.2
论文数:
2.3K
被引数:
1.4W
机构
引用论文
.png){kind=icon}
分享收藏
A MODEL OF CONSUMERS PREVENTIVE HEALTH BEHAVIORS - THE ROLE OF HEALTH MOTIVATION AND HEALTH ABILITY
PREAI
分享收藏
分享收藏分享收藏
查看更多内容