Investigating Teenagers’ Ability to Detect Phishing Messages

Nicholson, James, Javed, Yousra, Dixon, Matt, Coventry, Lynne, Dele-Ajayi, Opeyemi and Anderson, Philip (2020) Investigating Teenagers’ Ability to Detect Phishing Messages. In: 2020 IEEE 5th European Symposium on Security and Privacy Workshops (EuroS&PW). IEEE, Piscataway, NJ, pp. 140-149. ISBN 9781728185989, 9781728185972

Preview

Text EuroUSEC.teensphish.pdf - Accepted Version Download (544kB) | Preview

Abstract

Young people are increasingly becoming responsible for the security of their devices, yet do not appear to receive formal instruction on how to protect themselves online. In this paper, we investigate the phish detection performance of teenagers while exploring how their familiarity with a service affects their overall performance in identifying phishing messages. Our study with 83 teenagers finds that teenagers were poor at distinguishing between genuine and phishing messages in an experimental task, yet performance was not affected by the familiarity of the service. However, our participants exhibited riskier behavior when making decisions on unfamiliar messages, suggesting that this is an area for further exploration. We discuss the implications of the poor phishing performance for teenagers and explore possible avenues to improve their awareness of these attacks, e.g. through embedding training content within the school curriculum.

Actions (login required)

View Item

Downloads