{"id":"https://openalex.org/W3085861814","doi":"https://doi.org/10.1093/cybsec/tyaa009","title":"Categorizing human phishing difficulty: a Phish Scale","display_name":"Categorizing human phishing difficulty: a Phish Scale","publication_year":2020,"publication_date":"2020-01-01","ids":{"openalex":"https://openalex.org/W3085861814","doi":"https://doi.org/10.1093/cybsec/tyaa009","mag":"3085861814"},"language":"en","primary_location":{"id":"doi:10.1093/cybsec/tyaa009","is_oa":true,"landing_page_url":"https://doi.org/10.1093/cybsec/tyaa009","pdf_url":"https://academic.oup.com/cybersecurity/article-pdf/6/1/tyaa009/33746006/tyaa009.pdf","source":{"id":"https://openalex.org/S2735156331","display_name":"Journal of Cybersecurity","issn_l":"2057-2085","issn":["2057-2085","2057-2093"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://academic.oup.com/cybersecurity/article-pdf/6/1/tyaa009/33746006/tyaa009.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5061468478","display_name":"Michelle P. Steves","orcid":null},"institutions":[{"id":"https://openalex.org/I1321296531","display_name":"National Institute of Standards and Technology","ror":"https://ror.org/05xpvk416","country_code":"US","type":"funder","lineage":["https://openalex.org/I1321296531","https://openalex.org/I1343035065"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Michelle Steves","raw_affiliation_strings":["National Institute of Standards and Technology Gaithersberg, MD 20899, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Institute of Standards and Technology Gaithersberg, MD 20899, USA","institution_ids":["https://openalex.org/I1321296531"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073638056","display_name":"Kristen Greene","orcid":"https://orcid.org/0000-0001-7034-3672"},"institutions":[{"id":"https://openalex.org/I1321296531","display_name":"National Institute of Standards and Technology","ror":"https://ror.org/05xpvk416","country_code":"US","type":"funder","lineage":["https://openalex.org/I1321296531","https://openalex.org/I1343035065"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kristen Greene","raw_affiliation_strings":["National Institute of Standards and Technology Gaithersberg, MD 20899, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Institute of Standards and Technology Gaithersberg, MD 20899, USA","institution_ids":["https://openalex.org/I1321296531"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5010628621","display_name":"Mary Theofanos","orcid":"https://orcid.org/0000-0002-3209-6807"},"institutions":[{"id":"https://openalex.org/I1321296531","display_name":"National Institute of Standards and Technology","ror":"https://ror.org/05xpvk416","country_code":"US","type":"funder","lineage":["https://openalex.org/I1321296531","https://openalex.org/I1343035065"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mary Theofanos","raw_affiliation_strings":["National Institute of Standards and Technology Gaithersberg, MD 20899, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Institute of Standards and Technology Gaithersberg, MD 20899, USA","institution_ids":["https://openalex.org/I1321296531"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5061468478"],"corresponding_institution_ids":["https://openalex.org/I1321296531"],"apc_list":{"value":1864,"currency":"USD","value_usd":1864},"apc_paid":{"value":1864,"currency":"USD","value_usd":1864},"fwci":5.2914,"has_fulltext":false,"cited_by_count":39,"citation_normalized_percentile":{"value":0.95991894,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":99},"biblio":{"volume":"6","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11147","display_name":"Misinformation and Its Impacts","score":0.9947999715805054,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9929999709129333,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/phishing","display_name":"Phishing","score":0.9600609540939331},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.6731933355331421},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6018529534339905},{"id":"https://openalex.org/keywords/scale","display_name":"Scale (ratio)","score":0.5887739062309265},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.43902522325515747},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.4249928891658783},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.33725255727767944},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.15488898754119873}],"concepts":[{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.9600609540939331},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.6731933355331421},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6018529534339905},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.5887739062309265},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.43902522325515747},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.4249928891658783},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.33725255727767944},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.15488898754119873},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1093/cybsec/tyaa009","is_oa":true,"landing_page_url":"https://doi.org/10.1093/cybsec/tyaa009","pdf_url":"https://academic.oup.com/cybersecurity/article-pdf/6/1/tyaa009/33746006/tyaa009.pdf","source":{"id":"https://openalex.org/S2735156331","display_name":"Journal of Cybersecurity","issn_l":"2057-2085","issn":["2057-2085","2057-2093"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1093/cybsec/tyaa009","is_oa":true,"landing_page_url":"https://doi.org/10.1093/cybsec/tyaa009","pdf_url":"https://academic.oup.com/cybersecurity/article-pdf/6/1/tyaa009/33746006/tyaa009.pdf","source":{"id":"https://openalex.org/S2735156331","display_name":"Journal of Cybersecurity","issn_l":"2057-2085","issn":["2057-2085","2057-2093"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/17","display_name":"Partnerships for the goals","score":0.4099999964237213}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W621727291","https://openalex.org/W843704741","https://openalex.org/W1507740920","https://openalex.org/W1968042088","https://openalex.org/W2001195938","https://openalex.org/W2022334732","https://openalex.org/W2052176706","https://openalex.org/W2081430061","https://openalex.org/W2142287040","https://openalex.org/W2221203134","https://openalex.org/W2252446659","https://openalex.org/W2408511749","https://openalex.org/W2477913880","https://openalex.org/W2510870740","https://openalex.org/W2606850380","https://openalex.org/W2752099845","https://openalex.org/W2796415314","https://openalex.org/W2810024260","https://openalex.org/W2810389807","https://openalex.org/W2859027636","https://openalex.org/W2883464778","https://openalex.org/W6676156825","https://openalex.org/W6714463242"],"related_works":["https://openalex.org/W2149202530","https://openalex.org/W2807822918","https://openalex.org/W2921723332","https://openalex.org/W2482950156","https://openalex.org/W3042334625","https://openalex.org/W3139248031","https://openalex.org/W4200017362","https://openalex.org/W2305322260","https://openalex.org/W2118123121","https://openalex.org/W4388020458"],"abstract_inverted_index":{"Abstract":[0],"As":[1],"organizations":[2],"continue":[3],"to":[4,35,59,98,147,172,191],"invest":[5],"in":[6,137],"phishing":[7,67,83,112,122,138,155,165,180,197],"awareness":[8,43],"training":[9,21,33,44,113],"programs,":[10],"many":[11],"chief":[12],"information":[13],"security":[14],"officers":[15],"(CISOs)":[16],"are":[17,25,48],"concerned":[18],"when":[19,45,78],"their":[20,121],"exercise":[22,198],"click":[23,46,54,128,199],"rates":[24,47,55,200],"high":[26],"or":[27],"variable,":[28],"as":[29,188],"they":[30],"must":[31],"justify":[32],"budgets":[34],"organization":[36],"officials":[37],"who":[38],"question":[39],"the":[40,63,66,79,118,145,163],"efficacy":[41],"of":[42,65,81,120,179],"not":[49],"declining.":[50],"We":[51,130],"argue":[52],"that":[53,77],"should":[56],"be":[57],"expected":[58],"vary":[60],"based":[61],"on":[62,134,196],"difficulty":[64,119],"email":[68,84],"for":[69,96],"a":[70,82,87,100,106,176,189],"target":[71],"audience.":[72],"Past":[73],"research":[74,136],"has":[75],"shown":[76],"premise":[80],"aligns":[85],"with":[86,162,175],"user\u2019s":[88],"work":[89,169],"context,":[90,142],"it":[91,174],"is":[92,170],"much":[93],"more":[94],"challenging":[95],"users":[97],"detect":[99],"phish.":[101],"Given":[102],"this,":[103],"we":[104],"propose":[105],"Phish":[107,158,183],"Scale,":[108],"so":[109],"CISOs":[110],"and":[111,124,140,143,150],"implementers":[114],"can":[115],"easily":[116],"rate":[117],"exercises":[123],"help":[125,192],"explain":[126],"associated":[127],"rates.":[129],"base":[131],"our":[132],"scale":[133,146],"past":[135],"cues":[139],"user":[141],"apply":[144],"previously":[148],"published":[149],"new":[151],"data":[152,194],"from":[153],"enterprise-based":[154],"exercises.":[156],"The":[157,182],"Scale":[159,184],"performed":[160],"well":[161],"current":[164],"dataset,":[166],"but":[167],"future":[168],"needed":[171],"validate":[173],"larger":[177],"variety":[178],"emails.":[181],"shows":[185],"great":[186],"promise":[187],"tool":[190],"frame":[193],"sharing":[195],"across":[201],"sectors.":[202]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":10},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":9},{"year":2021,"cited_by_count":4}],"updated_date":"2026-05-30T09:04:40.226872","created_date":"2025-10-10T00:00:00"}