NSF CNS-1624149, Successfully Completed in January 2017

NSF CNS-1624149 EAGER: Investigating Elderly Computer Users' Susceptibility to Phishing

General Information

PI:

Dr. Chuan Yue

Co-PI:

Dr. Brandon Gavett

The Official NSF Award Website:

CNS-1624149

CNS-1359542

Status:

A Big Thanks

With the successful completion of this NSF project, I would like to sincerely thank all the current and previous program officers of this grant for their strong and continuous support to us. To both me and Dr. Gavett, this is our first NSF grant. We have spent tremendous amount of time and effort on the design and implementation of this project, and on the engaging and training of graduate and undergraduate students including three Computer Science students (one is female) and four Psychology students (three are female). To most of these students, it is also their first time to interact with researchers from a different discipline and to publish papers. Interdisciplinary research is fascinating, but very challenging. We have tried our best to ensure the high-quality of this project, and thanks again NSF, our wonderful students, and a great team!

Publications that report the results of this project:

Design and Evaluation of the Highly Insidious Extreme Phishing Attacks.
By Rui Zhao, Samantha John, Stacy Karas, Cara Bussell, Jennifer Roberts, Daniel Six, Brandon Gavett, and Chuan Yue.
In Journal of Computers & Security (COMPSEC), Elsevier, 70: 634--647, August 2017.
Phishing Suspiciousness in Older and Younger Adults: The Role of Executive Functioning.
By Brandon Gavett, Rui Zhao, Samantha John, Cara Bussell, Jennifer Roberts, and Chuan Yue.
In Journal of PLoS ONE, 12(2): e0171620, 2017.
The Highly Insidious Extreme Phishing Attacks.
By Rui Zhao, Samantha John, Stacy Karas, Cara Bussell, Jennifer Roberts, Daniel Six, Brandon Gavett, and Chuan Yue.
In proceedings of the IEEE International Conference on Computer Communication and Networks (ICCCN), 2016.
Using Item Response Theory to Improve the Ecological Validity of Neuropsychological Tests: An Example of Phishing Susceptibility (poster).
By Brandon E. Gavett, Rui Zhao, Samantha E. John, Daniel Six, Cara Bussell, Stacy Karas, Jennifer R. Roberts, Jason Adams, and Chuan Yue.
In proceedings of the 44th Annual Meeting in International Neuropsychological Society (INS), 2016.
Age Group, Not Executive Functioning, Predicts Past Susceptibility to Internet Phishing Scams (poster).
By Jennifer R. Roberts, Samantha E. John, Cara A. Bussell, Katalin Grajzel, Rui Zhao, Stacy Karas, Daniel Six, Chuan Yue, and Brandon E. Gavett.
In proceedings of the 35th Annual Conference of the National Academy of Neuropsychology (NAN), 2015.

Other publications with the acknowledgments of partial support from this NSF grant:

Sensor-based Mobile Web Fingerprinting and Cross-site Input Inference Attacks (a position paper).
By Chuan Yue.
In proceedings of the IEEE Workshop on Mobile Security Technologies (MoST), 2016.
SafeSky: A Secure Cloud Storage Middleware for End-user Applications.
By Rui Zhao, Chuan Yue, Byungchul Tak, and Chunqiang Tang.
In proceedings of the IEEE Symposium on Reliable Distributed Systems (SRDS), 2015.
Automatic Detection of Information Leakage Vulnerabilities in Browser Extensions.
By Rui Zhao, Chuan Yue, and Qing Yi.
In proceedings of the International World Wide Web Conference (WWW), 2015.
Toward A Secure and Usable Cloud-based Password Manager for Web Browsers.
By Rui Zhao and Chuan Yue.
In Journal of Computers & Security (COMPSEC), Elsevier, 46(3): 32--47, 2014.
(This is an extended version of our CODASPY'13 conference paper "All Your Browser-saved Passwords Could Belong to Us: a Security Analysis and a Cloud-based New Design",
which was reported by The Oregonian in March 2014, and has prompted at least one top Web browser vendor to make some important changes in its password manager feature.)

PhD dissertations supported in part by this NSF grant:

"Vulnerability Exploration and Data Protection in End-User Applications": by Rui Zhao, November 2016; Advisor: Chuan Yue
(Recipient of the university-level 2016 Rath Award for the Best PhD Thesis with the Potential for the Greatest Societal Impact!)

Shareable Testbed and Datasets:

Phishing Susceptibility Testbed: Due to the attacking nature of our phishing susceptibility testbed as described in our conference paper
"The Highly Insidious Extreme Phishing Attacks", please email PI Yue (chuanyue@mines.edu) if you want to use or adopt our testbed for your research purposes.
We will require you to fill and sign a form for responsible using of our testbed, and may require you to assure us the IRB approval of your research activities.
Datasets: Details about accessing our shareable datasets are described in our Journal paper "Phishing Suspiciousness in Older and Younger Adults: The Role of Executive Functioning".

Last updated in January 2017.