TU Darmstadt / ULB / TUbiblio

User experiences of TORPEDO: TOoltip-powered phishing email DetectiOn

Volkamer, Melanie and Renaud, Karen and Reinheimer, Benjamin and Kunz, Alexandra (2017):
User experiences of TORPEDO: TOoltip-powered phishing email DetectiOn.
In: >Computers & Security, pp. 100-113, 71, DOI: 10.1016/j.cose.2017.02.004, [Article]

Abstract

Abstract We propose a concept called TORPEDO to improve phish detection by providing just-in-time and just-in-place trustworthy tooltips. These help people to identify phish links embedded in emails. TORPEDO's tooltips contain the actual URL with the domain highlighted. Link activation is delayed for a short period, giving the person time to inspect the URL before they click on a link. Furthermore, TORPEDO provides an information diagram to explain phish detection. We evaluated TORPEDO's effectiveness, as compared to the worst case "status bar" as provided by other Web email interfaces. People using TORPEDO performed significantly better in detecting phishes and identifying legitimate emails (85.17% versus 43.31% correct answers for phish). We then carried out a field study with a number of TORPEDO users to explore actual user experiences of TORPEDO. We conclude the paper by reporting on the outcome of this field study and suggest improvements based on the feedback from the field study participants.

Item Type: Article
Erschienen: 2017
Creators: Volkamer, Melanie and Renaud, Karen and Reinheimer, Benjamin and Kunz, Alexandra
Title: User experiences of TORPEDO: TOoltip-powered phishing email DetectiOn
Language: English
Abstract:

Abstract We propose a concept called TORPEDO to improve phish detection by providing just-in-time and just-in-place trustworthy tooltips. These help people to identify phish links embedded in emails. TORPEDO's tooltips contain the actual URL with the domain highlighted. Link activation is delayed for a short period, giving the person time to inspect the URL before they click on a link. Furthermore, TORPEDO provides an information diagram to explain phish detection. We evaluated TORPEDO's effectiveness, as compared to the worst case "status bar" as provided by other Web email interfaces. People using TORPEDO performed significantly better in detecting phishes and identifying legitimate emails (85.17% versus 43.31% correct answers for phish). We then carried out a field study with a number of TORPEDO users to explore actual user experiences of TORPEDO. We conclude the paper by reporting on the outcome of this field study and suggest improvements based on the feedback from the field study participants.

Journal or Publication Title: >Computers & Security
Volume: 71
Uncontrolled Keywords: Security, Usability and Society;Phishing detection, Email, Thunderbird, Usable security, Tooltips, User studies
Divisions: 20 Department of Computer Science > SECUSO - Security, Usability and Society
Profile Areas > Cybersecurity (CYSEC)
20 Department of Computer Science
Profile Areas
Date Deposited: 15 Feb 2017 19:12
DOI: 10.1016/j.cose.2017.02.004
Identification Number: TUD-CS-2017-0034
Export:

Optionen (nur für Redakteure)

View Item View Item