Human Factors in Phishing Detection: Individual Differences and Environmental Influences

What Did This Cybersecurity Research Find?

This cybersecurity human factors study tested 1,400 employees on their ability to distinguish phishing from legitimate emails under varying workload conditions. Cybersecurity phishing detection accuracy dropped by 38% when employees were under high cognitive load, and time pressure was a stronger predictor of phishing susceptibility than technical knowledge.

Key Findings

• 1High cognitive load reduced phishing detection accuracy by 38%
• 2Time pressure was a stronger susceptibility factor than lack of technical knowledge
• 3Mobile device users were 27% more likely to click phishing links than desktop users
• 4Personalized phishing (spear phishing) defeated detection by even the most trained participants 31% of the time
• 5Visual cue training (checking URLs, sender addresses) degraded under stress but remained the most effective strategy

How Does This Apply to Cybersecurity Careers?

Security awareness professionals should time training and simulations with cognitive load in mind. This research explains why technically savvy employees still fall for phishing.

Who Should Read This?

Frequently Asked Questions