Phishing for AnswersPhishing for Answers

Tim Martin, PhDTim Martin, PhD

Capella UniversityCapella University

March 27, 2009March 27, 2009

OverviewOverview

Research SummaryResearch Summary

ResultsResults

FindingsFindings

ImplicationsImplications

Future StudiesFuture Studies

ReferencesReferences

QuestionsQuestions

Research SummaryResearch Summary

Demographic SurveyDemographic Survey

Pre and Post TestsPre and Post Tests

ResultsResults

153 Participants (141 usable)153 Participants (141 usable)

Younger Participants More VariedYounger Participants More Varied

Female Scores More VariedFemale Scores More Varied

2 Perfect Scores2 Perfect Scores

FindingsFindings

No Variable SignificantNo Variable Significant

Multiple FactorsMultiple Factors

Perfect Score UncommonPerfect Score Uncommon

ImplicationsImplications

Education/Training not Single SolutionEducation/Training not Single Solution

Go Beyond the “What”Go Beyond the “What”

Future StudiesFuture Studies

Address the Why (qualitative)Address the Why (qualitative)

Explore Vishing, SmishingExplore Vishing, Smishing

Explore Impact of Social EngineeringExplore Impact of Social Engineering

ReferencesReferencesAnti-Phishing Working Group Anti-Phishing Working Group www.antiphishing.org/newswire.htmlwww.antiphishing.org/newswire.html

Boulware, Folsom and Guillory StudyBoulware, Folsom and Guillory Studyhttp://mooreschool.sc.edu/moore/research/Publications/BandE/bande52/52n1/technology.htmlhttp://mooreschool.sc.edu/moore/research/Publications/BandE/bande52/52n1/technology.html

Federal Trade CommissionFederal Trade Commissionwww.ftc.gov/bcp/edu/pubs/consumer/alerts/alt127.htmwww.ftc.gov/bcp/edu/pubs/consumer/alerts/alt127.htm

Government Online Information SiteGovernment Online Information Siteonguardonline.gov/index.htmlonguardonline.gov/index.html

Intrepidus Group Intrepidus Group http://www.phishme.com/index.htmlhttp://www.phishme.com/index.html

Phishtank Website SitePhishtank Website Sitewww.phishtank.comwww.phishtank.com

Privacy Rights Clearing HousePrivacy Rights Clearing Housewww.privacyrights.org/fs/fs17a.htmwww.privacyrights.org/fs/fs17a.htm

SonicWALL Phishing IQ TestSonicWALL Phishing IQ Testwww.sonicwall.comwww.sonicwall.com

Questions or Comments?Questions or Comments?