2314. The Impact of Time Pressure on Phishing Email Identification
Invited abstract in session WB-5: Behavioral Decision Approaches for Risk & Innovation, stream Decision Theory and Multi-criteria Decision Making.
Wednesday, 10:45-12:15Room: H7
Authors (first author is the speaker)
| 1. | Ashima Khurana
|
| Karlsruhe Institute of Technology |
Abstract
Cybersecurity involves decision-making under risk and uncertainty within complex, interconnected environments. Attackers exploit this complexity by leveraging human vulnerabilities through social engineering tactics. The current study delves deeper into the factors affecting cybersecurity behaviour amid evolving cyber-threats. Specifically, we examine the role of time pressure and the mediating effect of risk awareness on phishing detection performance.
While prior research has primarily focused on user characteristics and source credibility, limited attention has been given to contextual factors that affect information processing, such as time pressure. Drawing on the theoretical foundation of dual process theory, which distinguishes between fast and automatic (System 1) and slow and deliberative (System 2) thinking, this study manipulates time pressure to examine the impact of cognitive processing on phishing detection. Time pressure is hypothesized to hinder System 2 processing by increasing cognitive load, leading to reliance on System 1, which often overlooks minor red flags in emails. This shift may lead to faulty judgments in the high-risk cybersecurity context.
In a within-subject role-playing experiment, participants simulate an employee's role and respond to a series of emails, deciding whether to engage with or delete each message. They undergo two treatments: time pressure induced by explicitly limiting the time available to answer an email and no time pressure, followed by a post-questionnaire survey on behavioural and cognitive preferences.
The expected results are reduced detection accuracy under time pressure due to reliance on System 1, and improved accuracy in both cognitive modes when primed with an awareness video.
Keywords
- Risk Analysis and Management
- Decision Theory and Analysis
Status: accepted
Back to the list of papers