Cyberfraud

Question 1

Fraud

Answer 1

-Intentional deception
-phishing- gain secret info/install malware- via email or face to face approach or long distance

Social engineering- manipulate people, make them perform some action- can be face to face or long distance

Question 2

Social phishing

Answer 2

Context aware phishing

Question 3

Experiments

Answer 3

Are special type of user studies

Goal: test hypothesis

Hypothesis: well-founded assumption about cause relation between iv and dv

How can causality be determined: random assignment to control group and experimental group

Control group: normal value of iv

Experimental group:experimental value of iv

Hypothesis: difference in dv between 2 groups

Question 4

Reasons for clicking

Answer 4

Personalization
Curiosity
Risk underestimation
Lack of expert knowledge
Automatic reaction

Question 5

Reasons for not clicking

Answer 5

Unknown sender
Fraud suspicion
Situation context
Life context
Privacy

Question 6

False negative vs false positive

Answer 6

False negatives- dangerous message not detected

False positive-benign messages classified as dangerous

Question 7

Why is phishing awareness difficult to maintain

Answer 7

-security aware behavior difficult to maintain
-many legitimate emails look phishy
-life and work practices clash with security behavior
Social norms clash with security behavior

Question 8

Feasibility of anti phishing training

Answer 8

• no evidence it works in the real world
  -some no effect at all
  -training effect decline after 1-2 month
  -cost of phishing attack per user a year-33cents

Question 9

6 principles of influence

Answer 9

1. Reciprocity- we protect your account, please helps us by clicking here
2. Commitment and consistency- thank you for using our service, click here for benefits for loyal customers
3. Social proof-x% of our customers say this product is good
4. Authority- we are a well known company
5. Liking - this is what customers say about out service
6. scarcity- if u dont click here now we will have to close your account

Question 10

Why do nigerian scammers say they are from nigeria

Answer 10

Someone who believes this can be made to believe anything.
Someone who does not fall is not worth the effort, because at some point they will most likely notice is a scam

Question 11

Demographics of scam victims

Answer 11

No difference in gender
Almost no difference in age
Higher educational levels
Life changing events such as deaths, illnesses

Question 12

Why is defense against social engineering difficult?

Answer 12

Human nature- we tend to trust each other

Trust bias vs deception bias

Really determined social engineer will get anyone