Speaker: Dr. David Langer

External tagging, warning banners, email filters: organizations rely on a wide range of measures to protect against phishing. But do these measures actually deliver, and are they equally effective for all employees?

Phishing exploits psychological mechanisms such as authority, urgency, or the prospect of gains and losses. Yet research shows that the success of these mechanisms depends strongly on factors such as context and target group. And if phishing risk varies depending on such factors, typical one-size-fits-all measures fall short.

At the heart of the talk is a large-scale field study conducted at a German university hospital, examining these specific issues under real-world conditions. Ten characteristics of phishing emails and eleven d ...