Measuring the Effectiveness of Popular Communication Platforms in Phishing Education

Abstract

The widespread occurrence of phishing threats in the digital realm emphasises the necessity of understanding how end-users perceive these risks and how to effectively deliver anti-phishing education. This research focuses on the comparative analysis of communication platforms as training mediums and explores the emotional impact of phishing on end-users. The thesis examines the effectiveness of anti-phishing training delivered through widely used communication channels: WhatsApp, SMS, and emails. It explores how various training methods impact end-users’ perception, detection capabilities, phishing knowledge, and emotions when dealing with phishing attempts. The thesis presents a study capturing expert opinions on end-user security behaviours and perceptions. Subsequently, it investigates end-users’ perspectives on security threats and coping strategies. The core of the thesis lies in a comparative study investigating the effectiveness of anti-phishing training delivered through different communication platforms (SMS, email, and WhatsApp) and a control group. The analysis reveals that WhatsApp-based training significantly improves phishing detection capabilities compared to other platforms, enhancing knowledge about phishing and improving the detection of both phishing and non-phishing attempts across various mediums. The thesis further explores perceptual, behavioural, and emotional changes experienced by participants, highlighting differences between the WhatsApp group and the other groups in adopting protective technologies, spotting techniques, and emotional responses. Furthermore, the research uncovered the influence of demographic factors on training outcomes. Specifically, it was found that individuals over the age of 24, females, and non-native English speakers exhibited the most significant improvements in phishing detection abilities after receiving the training. This systematic analysis of phishing training approaches bridges the gap between theoretical insights and practical applications, providing valuable insights for both academia and industry. The findings emphasise WhatsApp’s potential as an effective channel for anti-phishing training and underscore the importance of considering the emotional impact of phishing on end-users. The insights gleaned from this work can inform the development of more targeted and effective strategies for combating phishing threats, ultimately contributing to a safer digital environment.