This paper examines the processes of a phishing attack in a hospital setting by using a simulation-based approach to analyze the employees’ responses to phishing emails. The aim is to improve organizational resilience against phishing attacks and enhance overall cybersecurity measures. The approach emphasizes particularly the risks of clicking on a malicious link and the benefits of reporting suspicious activities. The COM-B framework was used to provide a structured analysis of the capability, opportunity and motivation of employees and the factors that influence their behavior. Furthermore, adaptive network-oriented modeling was used to offer a nuanced understanding of the interactions between the cognitive, emotional, and the social processes and their adaptation over longer time periods. The paper also includes the simulation results and future work recommendations.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Analysis of Management of Phishing Attack Risks Based on an Adaptive Network Model

  • Flavia Lepădatu,
  • Teodora Mihăilescu,
  • Senne Spaan,
  • Paula Ţiţei,
  • Marjolein van der Vossen,
  • Niek Jan van den Hout,
  • Charlotte Hoffmans,
  • Jan Treur,
  • Peter H. M. P. Roelofsma

摘要

This paper examines the processes of a phishing attack in a hospital setting by using a simulation-based approach to analyze the employees’ responses to phishing emails. The aim is to improve organizational resilience against phishing attacks and enhance overall cybersecurity measures. The approach emphasizes particularly the risks of clicking on a malicious link and the benefits of reporting suspicious activities. The COM-B framework was used to provide a structured analysis of the capability, opportunity and motivation of employees and the factors that influence their behavior. Furthermore, adaptive network-oriented modeling was used to offer a nuanced understanding of the interactions between the cognitive, emotional, and the social processes and their adaptation over longer time periods. The paper also includes the simulation results and future work recommendations.