<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-01463838</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-21T00:06:13+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Phishing for the Truth: A Scenario-Based Experiment of Users’ Behavioural Response to Emails</title>
            <author role="aut">
              <persName>
                <forename type="first">Kathryn</forename>
                <surname>Parsons</surname>
              </persName>
              <email type="md5">13edf4de1336495799f3df08a422c4b3</email>
              <email type="domain">dsto.defence.gov.au</email>
              <idno type="idhal" notation="numeric">1001115</idno>
              <idno type="halauthorid" notation="string">1130532-1001115</idno>
              <affiliation ref="#struct-242499"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Agata</forename>
                <surname>Mccormac</surname>
              </persName>
              <email type="md5">49cd906b8c2314531adb4ed71a3783ec</email>
              <email type="domain">dsto.defence.gov.au</email>
              <idno type="idhal" notation="numeric">1001116</idno>
              <idno type="halauthorid" notation="string">1130533-1001116</idno>
              <affiliation ref="#struct-242499"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Malcolm</forename>
                <surname>Pattinson</surname>
              </persName>
              <email type="md5">65f1707aa0ba3d334f52fe58f7a4a0df</email>
              <email type="domain">adelaide.edu.au</email>
              <idno type="idhal" notation="numeric">1001117</idno>
              <idno type="halauthorid" notation="string">1130534-1001117</idno>
              <affiliation ref="#struct-116321"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Marcus</forename>
                <surname>Butavicius</surname>
              </persName>
              <email type="md5">dbfc32fa7a8a9c23f82aee554aa2e6a5</email>
              <email type="domain">dsto.defence.gov.au</email>
              <idno type="idhal" notation="numeric">1001118</idno>
              <idno type="halauthorid" notation="string">1130535-1001118</idno>
              <affiliation ref="#struct-242499"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Cate</forename>
                <surname>Jerram</surname>
              </persName>
              <email type="md5">5186ad3bf64171b0d34ab557578af9c0</email>
              <email type="domain">adelaide.edu.au</email>
              <idno type="idhal" notation="numeric">1001119</idno>
              <idno type="halauthorid" notation="string">1130536-1001119</idno>
              <affiliation ref="#struct-116321"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Hal</forename>
                <surname>Ifip</surname>
              </persName>
              <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
              <email type="domain">inria.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2017-02-09 17:24:13</date>
              <date type="whenModified">2025-06-19 14:20:08</date>
              <date type="whenReleased">2017-02-09 17:37:19</date>
              <date type="whenProduced">2013-07-08</date>
              <date type="whenEndEmbargoed">2016-01-01</date>
              <ref type="file" target="https://inria.hal.science/hal-01463838v1/document">
                <date notBefore="2016-01-01"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://inria.hal.science/hal-01463838v1/file/978-3-642-39218-4_27_Chapter.pdf" id="file-1463838-1534307">
                <date notBefore="2016-01-01"/>
              </ref>
              <ref type="externalLink" target="https://link.springer.com/content/pdf/10.1007%2F978-3-642-39218-4_27.pdf"/>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="200187">
                <persName>
                  <forename>Hal</forename>
                  <surname>Ifip</surname>
                </persName>
                <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
                <email type="domain">inria.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-01463838</idno>
            <idno type="halUri">https://inria.hal.science/hal-01463838</idno>
            <idno type="halBibtex">parsons:hal-01463838</idno>
            <idno type="halRefHtml">&lt;i&gt;28th Security and Privacy Protection in Information Processing Systems (SEC)&lt;/i&gt;, Jul 2013, Auckland, New Zealand. pp.366-378, &lt;a target="_blank" href="https://dx.doi.org/10.1007/978-3-642-39218-4_27"&gt;&amp;#x27E8;10.1007/978-3-642-39218-4_27&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">28th Security and Privacy Protection in Information Processing Systems (SEC), Jul 2013, Auckland, New Zealand. pp.366-378, &amp;#x27E8;10.1007/978-3-642-39218-4_27&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-1463838-1534307"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="IFIP">IFIP - International Federation for Information Processing</idno>
            <idno type="stamp" n="IFIP-AICT" corresp="IFIP">IFIP Advances in Information and Communication Technology</idno>
            <idno type="stamp" n="IFIP-TC" corresp="IFIP">IFIP Technical Committees </idno>
            <idno type="stamp" n="IFIP-TC11" corresp="IFIP-TC">IFIP TC11: Security and Privacy Protection in Information Processing Systems</idno>
            <idno type="stamp" n="IFIP-SEC" corresp="IFIP"> International Information Security Conference</idno>
            <idno type="stamp" n="IFIP-AICT-405" corresp="IFIP-AICT">Security and Privacy Protection in Information Processing Systems</idno>
          </seriesStmt>
          <notesStmt>
            <note type="commentary">Part 8: Social Engineering</note>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Phishing for the Truth: A Scenario-Based Experiment of Users’ Behavioural Response to Emails</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Kathryn</forename>
                    <surname>Parsons</surname>
                  </persName>
                  <email type="md5">13edf4de1336495799f3df08a422c4b3</email>
                  <email type="domain">dsto.defence.gov.au</email>
                  <idno type="idhal" notation="numeric">1001115</idno>
                  <idno type="halauthorid" notation="string">1130532-1001115</idno>
                  <affiliation ref="#struct-242499"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Agata</forename>
                    <surname>Mccormac</surname>
                  </persName>
                  <email type="md5">49cd906b8c2314531adb4ed71a3783ec</email>
                  <email type="domain">dsto.defence.gov.au</email>
                  <idno type="idhal" notation="numeric">1001116</idno>
                  <idno type="halauthorid" notation="string">1130533-1001116</idno>
                  <affiliation ref="#struct-242499"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Malcolm</forename>
                    <surname>Pattinson</surname>
                  </persName>
                  <email type="md5">65f1707aa0ba3d334f52fe58f7a4a0df</email>
                  <email type="domain">adelaide.edu.au</email>
                  <idno type="idhal" notation="numeric">1001117</idno>
                  <idno type="halauthorid" notation="string">1130534-1001117</idno>
                  <affiliation ref="#struct-116321"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Marcus</forename>
                    <surname>Butavicius</surname>
                  </persName>
                  <email type="md5">dbfc32fa7a8a9c23f82aee554aa2e6a5</email>
                  <email type="domain">dsto.defence.gov.au</email>
                  <idno type="idhal" notation="numeric">1001118</idno>
                  <idno type="halauthorid" notation="string">1130535-1001118</idno>
                  <affiliation ref="#struct-242499"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Cate</forename>
                    <surname>Jerram</surname>
                  </persName>
                  <email type="md5">5186ad3bf64171b0d34ab557578af9c0</email>
                  <email type="domain">adelaide.edu.au</email>
                  <idno type="idhal" notation="numeric">1001119</idno>
                  <idno type="halauthorid" notation="string">1130536-1001119</idno>
                  <affiliation ref="#struct-116321"/>
                </author>
              </analytic>
              <monogr>
                <title level="m">IFIP Advances in Information and Communication Technology</title>
                <meeting>
                  <title>28th Security and Privacy Protection in Information Processing Systems (SEC)</title>
                  <date type="start">2013-07-08</date>
                  <date type="end">2013-07-10</date>
                  <settlement>Auckland</settlement>
                  <country key="NZ">New Zealand</country>
                </meeting>
                <editor>Lech J. Janczewski</editor>
                <editor>Henry B. Wolfe</editor>
                <editor>Sujeet Shenoi</editor>
                <imprint>
                  <publisher>Springer</publisher>
                  <biblScope unit="serie">Security and Privacy Protection in Information Processing                    Systems</biblScope>
                  <biblScope unit="volume">AICT-405</biblScope>
                  <biblScope unit="pp">366-378</biblScope>
                  <date type="datePub">2013</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1007/978-3-642-39218-4_27</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">security training</term>
                <term xml:lang="en">email security</term>
                <term xml:lang="en">security behaviours</term>
                <term xml:lang="en">information security</term>
                <term xml:lang="en">phishing</term>
              </keywords>
              <classCode scheme="halDomain" n="info">Computer Science [cs]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>Using a role play scenario experiment, 117 participants were asked to manage 50 emails. To test whether the knowledge that participants are undertaking a phishing study impacts on their decisions, only half of the participants were informed that the study was assessing the ability to identify phishing emails. Results indicated that the participants who were informed that they were undertaking a phishing study were significantly better at correctly managing phishing emails and took longer to make decisions. This was not caused by a bias towards judging an email as a phishing attack, but instead, an increase in the ability to discriminate between phishing and real emails. Interestingly, participants who had formal training in information systems performed more poorly overall. Our results have implications for the interpretation of previous phishing studies, the design of future studies and for training and education campaigns, as it suggests that when people are primed about phishing risks, they adopt a more diligent screening approach to emails.</p>
            </abstract>
            <particDesc>
              <org type="consortium">TC 11</org>
            </particDesc>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="laboratory" xml:id="struct-242499" status="VALID">
          <orgName>Defence Science and Technology Organisation</orgName>
          <orgName type="acronym">DSTO</orgName>
          <desc>
            <address>
              <country key="AU"/>
            </address>
            <ref type="url">http://www.dsto.defence.gov.au/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-325886" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-116321" status="VALID">
          <idno type="ROR">https://ror.org/01p93h210</idno>
          <orgName>University of South Australia [Adelaide]</orgName>
          <desc>
            <address>
              <addrLine>101 Currie St, Adelaide SA 5001</addrLine>
              <country key="AU"/>
            </address>
            <ref type="url">https://www.unisa.edu.au/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-325886" status="VALID">
          <orgName>Australian Government</orgName>
          <desc>
            <address>
              <country key="AU"/>
            </address>
            <ref type="url">http://www.australia.gov.au/</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>