Trends in Phishing Attacks: Suggestions for Future Research

Keywords

Phishing, Security, Fraud, Cybercrime, Linguistic Analysis, Email, Scam, Human-Computer Interaction, Computer Credibility, Expert Systems

Abstract

Deception in computer-mediated communication is a widespread phenomenon. Cyber criminals are exploiting technological mediums to communicate with potential targets as these channels reduce both the deception cues and the risk of detection itself. A prevalent deception-based attack in computer-mediated communication is phishing. Prior phishing research has addressed the “bait” and “hook” components of phishing attacks, the human-computer interaction that takes place as users judge the veracity of phishing emails and websites, and the development of technologies that can aid users in identifying and rejecting these attacks. Despite the extant research on this topic, phishing attacks continue to be successful as tactics evolve rendering existing research less relevant, and users disregard the recommendations of automated phishing tools. This paper summarizes the core of phishing research, provides an update on trending attack methods, and proposes future research addressing computer credibility in a phishing context.

Original Publication Citation

"Proudfoot, J. G., Giboney, J. S., Schuetzler, R. & Durcikova, A. (2011). Trends in phishing attacks: Suggestions for future research. Americas Conference on Information Systems."

Document Type

Conference Paper

Publication Date

2011

Permanent URL

http://hdl.lib.byu.edu/1877/8411

Publisher

Americas Conference on Information Systems

Language

English

College

Marriott School of Business

Department

Information Systems

University Standing at Time of Publication

Assistant Professor

Link to Full Text

Share

COinS