Catch The Phish: A Study On Decision-making and Reporting Behavior For Phishing Attacks

Catch The Phish: A Study On Decision-making and Reporting Behavior For Phishing Attacks

Bahl, Robin (TU Delft Technology, Policy and Management)

Parkin, S.E. (mentor)
Lieu, J. (mentor)
van Eeten, M.J.G. (graduation committee)

Delft University of Technology

Management of Technology (MoT)

2023-08-17

Addressing the growing problem of phishing attacks requires nurturing a reporting culture within organizations. This research examines the factors influencing reporting behavior and the role of infrastructure & support in enhancing reporting rates. By adopting a mixed methods approach and analyzing phishing simulation logs and user perspectives, the study utilizes the COMB model to identify key factors that affect reporting behavior. The research emphasizes the importance of reassessing the desired level of reporting to ensure the benefits of reporting do not overshadow the associated costs. To foster a reporting culture, organizations should ensure a user-friendly reporting process and offer regular reminders and training programs. Emphasizing communication, transparency, and trust-building are vital in encouraging reporting and providing timely feedback. Leveraging technology to optimize the reporting process and appreciating users' efforts further enhance reporting rates. Overall, embracing a paradigm shift that recognizes users as part of the solution is crucial in nurturing a reporting culture and ensuring a secure digital environment.

Cybersecurity
Phishing attacks
Reporting culture
Cybersecurity awareness
COMB Model
Infrastructure and support
User Perspectives

http://resolver.tudelft.nl/uuid:b1afe7a6-da11-4faf-bcff-817dd66a4304

Student theses

master thesis

© 2023 Robin Bahl