EASE 2024
Tue 18 - Fri 21 June 2024 Salerno, Italy

Phishing is the most common vector for initial access. Current defenses such as spam filters and self-reporting phishing are unfortunately insufficient. Past works found that gender impacts the perception of risk and that background impacts susceptibility to phishing. Assessing the risk of phishing in both technical and non-technical populations has not been sufficiently explored, yet these insights could contribute to improving training material. To address this gap, we conducted a survey with 145 students at two universities. We measured (a) the effect of gender and background on identifying and assessing phishing risks and (b) the effect of gender and background on the perception of the trainer. We found that background has a significant impact on identification and assessment of phishing risks and that no gender bias was present in neither the technical nor non-technical population.