Publications by Lilly Kassner

This paper presents an experimental study in the form of an online serious game to increase IT security awareness regarding phishing. Prior studies have indicated the effectiveness of serious games concerning certain aspects of phishing attacks. This paper combines various aspects of social engineering attacks, existing prevention concepts, and gamification methods. A survey and interviews with 61 participants from different companies were conducted to measure the effectiveness. The findings suggest that using a serious game in context with phishing emails can be used beneficially and effectively.