Checking, nudging or scoring? Evaluating e-mail user security tools
summary
Three tools are built and tested in a simulated Outlook web inbox: a Check button that verifies sender history, a collegial phishing report nudge, and a suspicion score nudge. Twenty-seven professional users sort 33 legitimate and 6 phishing emails; the past correspondence check and the suspicion score prove most useful, the collegial nudge often gets ignored or is disruptive, and many users still reach wrong judgements despite two‑thirds having prior cybersecurity training. Usable tools highlight intuitive legitimacy cues and avoid harming productivity.
AI-written summary · about
chapters (8)
- 0:00Email security tools intro
- 1:33Three designs for tools
- 4:24Study design and participants
- 7:43Check button iterations
- 10:14Collegiate fishing report nudge
- 11:18Suspicion score nudge
- 12:43Key findings and usability
- 15:12Future tool recommendations
related talks
12m"I don’t know why I check this...'' Investigating Expert Users' Strategies to Detect...
42mPhishing With a Net: The NIST Phish Scale and Cybersecurity Awareness
05mKnowledge and Capabilities that Non-Expert Users Bring to Phishing Detection
09mPresenting Suspicious Details in User-Facing E-mail Headers Does Not Improve...
38mClick Here Now: A Positive Way to Create Phishing Awareness
53mRisk Profiles: Why Some Employees Attract Danger and Others Dodge It
27mBlunting the Phisher's Spear: A Risk-Based Approach...
05mAn investigation of phishing awareness and education over time: When and how to best