{"id":"https://openalex.org/W4417252139","doi":"https://doi.org/10.1109/access.2025.3642897","title":"How Johnny Experiences Phishing Warnings: A Qualitative Study Investigating the Impact of Design Decisions on the User","display_name":"How Johnny Experiences Phishing Warnings: A Qualitative Study Investigating the Impact of Design Decisions on the User","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4417252139","doi":"https://doi.org/10.1109/access.2025.3642897"},"language":"en","primary_location":{"id":"doi:10.1109/access.2025.3642897","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3642897","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2025.3642897","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5007531956","display_name":"Stefanie Pham","orcid":null},"institutions":[{"id":"https://openalex.org/I8204097","display_name":"Ludwig-Maximilians-Universit\u00e4t M\u00fcnchen","ror":"https://ror.org/05591te55","country_code":"DE","type":"education","lineage":["https://openalex.org/I8204097"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Stefanie Pham","raw_affiliation_strings":["Ludwig-Maximilians-Universität München, Munich, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ludwig-Maximilians-Universität München, Munich, Germany","institution_ids":["https://openalex.org/I8204097"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070924321","display_name":"Gabriele Lenzini","orcid":"https://orcid.org/0000-0001-8229-3270"},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Gabriele Lenzini","raw_affiliation_strings":["SnT, Université du Luxembourg (UL), Luxembourg City, Luxembourg","Université du Luxembourg (UL/SnT), Luxembourg, Luxembourg"],"raw_orcid":"https://orcid.org/0000-0001-8229-3270","affiliations":[{"raw_affiliation_string":"SnT, Université du Luxembourg (UL), Luxembourg City, Luxembourg","institution_ids":["https://openalex.org/I186903577"]},{"raw_affiliation_string":"Université du Luxembourg (UL/SnT), Luxembourg, Luxembourg","institution_ids":["https://openalex.org/I186903577"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5087077755","display_name":"Daniela P\u00f6hn","orcid":"https://orcid.org/0000-0002-6373-3637"},"institutions":[{"id":"https://openalex.org/I40527276","display_name":"Universit\u00e4t der Bundeswehr M\u00fcnchen","ror":"https://ror.org/05kkv3f82","country_code":"DE","type":"education","lineage":["https://openalex.org/I1315109972","https://openalex.org/I40527276","https://openalex.org/I4387152969"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Daniela P\u00f6hn","raw_affiliation_strings":["RI CODE, University of the Bundeswehr Munich, Neubiberg, Germany","University of the Bundeswehr Munich, RI CODE, Neubiberg, Germany"],"raw_orcid":"https://orcid.org/0000-0002-6373-3637","affiliations":[{"raw_affiliation_string":"RI CODE, University of the Bundeswehr Munich, Neubiberg, Germany","institution_ids":["https://openalex.org/I40527276"]},{"raw_affiliation_string":"University of the Bundeswehr Munich, RI CODE, Neubiberg, Germany","institution_ids":["https://openalex.org/I40527276"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.47289722,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"13","issue":null,"first_page":"211960","last_page":"211980"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.4496000111103058,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.4496000111103058,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.1745000034570694,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.09669999778270721,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/phishing","display_name":"Phishing","score":0.8884000182151794},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5705000162124634},{"id":"https://openalex.org/keywords/thematic-analysis","display_name":"Thematic analysis","score":0.541100025177002},{"id":"https://openalex.org/keywords/qualitative-research","display_name":"Qualitative research","score":0.5397999882698059},{"id":"https://openalex.org/keywords/incentive","display_name":"Incentive","score":0.46630001068115234},{"id":"https://openalex.org/keywords/pace","display_name":"Pace","score":0.4643000066280365},{"id":"https://openalex.org/keywords/frame","display_name":"Frame (networking)","score":0.38679999113082886},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.36079999804496765}],"concepts":[{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.8884000182151794},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6499000191688538},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.632099986076355},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5705000162124634},{"id":"https://openalex.org/C74196892","wikidata":"https://www.wikidata.org/wiki/Q7781188","display_name":"Thematic analysis","level":3,"score":0.541100025177002},{"id":"https://openalex.org/C190248442","wikidata":"https://www.wikidata.org/wiki/Q839486","display_name":"Qualitative research","level":2,"score":0.5397999882698059},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5336999893188477},{"id":"https://openalex.org/C29122968","wikidata":"https://www.wikidata.org/wiki/Q1414816","display_name":"Incentive","level":2,"score":0.46630001068115234},{"id":"https://openalex.org/C2777526511","wikidata":"https://www.wikidata.org/wiki/Q691543","display_name":"Pace","level":2,"score":0.4643000066280365},{"id":"https://openalex.org/C126042441","wikidata":"https://www.wikidata.org/wiki/Q1324888","display_name":"Frame (networking)","level":2,"score":0.38679999113082886},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.37950000166893005},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.36079999804496765},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.3402999937534332},{"id":"https://openalex.org/C3018587665","wikidata":"https://www.wikidata.org/wiki/Q7268696","display_name":"Qualitative analysis","level":3,"score":0.3285999894142151},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.3091000020503998},{"id":"https://openalex.org/C2778449503","wikidata":"https://www.wikidata.org/wiki/Q329777","display_name":"Appeal","level":2,"score":0.2872999906539917},{"id":"https://openalex.org/C186625053","wikidata":"https://www.wikidata.org/wiki/Q1130191","display_name":"Information overload","level":2,"score":0.2831000089645386},{"id":"https://openalex.org/C522325796","wikidata":"https://www.wikidata.org/wiki/Q471880","display_name":"Identity theft","level":2,"score":0.2809999883174896},{"id":"https://openalex.org/C170130773","wikidata":"https://www.wikidata.org/wiki/Q216378","display_name":"Usability","level":2,"score":0.2702000141143799},{"id":"https://openalex.org/C201025465","wikidata":"https://www.wikidata.org/wiki/Q11248500","display_name":"User experience design","level":2,"score":0.2702000141143799},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.26339998841285706},{"id":"https://openalex.org/C29825287","wikidata":"https://www.wikidata.org/wiki/Q1427940","display_name":"Warning system","level":2,"score":0.262800008058548},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.2596000134944916},{"id":"https://openalex.org/C87156501","wikidata":"https://www.wikidata.org/wiki/Q7268708","display_name":"Qualitative property","level":2,"score":0.2549000084400177},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.2542000114917755}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2025.3642897","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3642897","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:orbilu.uni.lu:10993/66938","is_oa":true,"landing_page_url":"https://orbilu.uni.lu/handle/10993/66938","pdf_url":null,"source":{"id":"https://openalex.org/S4306401815","display_name":"Open Repository and Bibliography (University of Luxembourg)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I186903577","host_organization_name":"University of Luxembourg","host_organization_lineage":["https://openalex.org/I186903577"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"IEEE Access, 1-1 (2025-12)","raw_type":"http://purl.org/coar/resource_type/c_6501"}],"best_oa_location":{"id":"doi:10.1109/access.2025.3642897","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3642897","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F3194594166","display_name":"Universit\u00e4t der Bundeswehr M\u00fcnchen","ror":"https://ror.org/05kkv3f82"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"To":[0],"this":[1],"day,":[2],"phishing":[3,29,128,242],"remains":[4],"one":[5],"of":[6,41,101,109,142,185,194],"the":[7,38,45,66,92,102,155,160,169,182,188,195,198],"most":[8],"critical":[9],"and":[10,20,71,96,158,206,222,234],"elusive":[11],"threats":[12],"in":[13,106,136,171,238],"cybersecurity.":[14],"Although":[15],"detection":[16],"technologies":[17],"have":[18,23],"evolved":[19],"improved,":[21],"they":[22,48,191],"not":[24],"kept":[25],"pace":[26],"with":[27,44,68,120,127],"novel":[28,162],"strategies.":[30],"Thus,":[31],"when":[32,47],"software":[33],"cannot":[34],"definitively":[35],"identify":[36],"phishing,":[37],"last":[39],"line":[40],"defense":[42],"rests":[43],"user":[46,67],"are":[49,230],"asked":[50],"to":[51,73,138,220],"\u201cthink":[52],"before":[53],"you":[54],"click\u201d.":[55],"The":[56],"appeal":[57],"is":[58],"commonly":[59],"accompanied":[60,130],"by":[61,131,145],"warning":[62,80,107,132,189,227],"messages,":[63],"supposedly":[64],"providing":[65],"enough":[69],"information":[70],"incentive":[72],"make":[74],"an":[75],"informed,":[76],"secure":[77],"decision.":[78],"However,":[79],"messages":[81,133],"must":[82],"be":[83],"carefully":[84],"crafted":[85],"because":[86],"their":[87,175,204,208],"elements":[88,105,141,157],"can":[89],"considerably":[90],"affect":[91],"user\u2019s":[93],"agency,":[94],"trust,":[95],"decision-making.":[97],"We":[98,112],"selected":[99],"four":[100,140,156],"key":[103],"design":[104,221],"messages:content,placement,level":[108],"friction,":[110],"andtiming.":[111],"conducted":[113],"a":[114,146,213],"qualitative":[115],"study":[116],"using":[117],"think-aloud":[118],"sessions":[119],"18":[121],"participants.":[122],"Each":[123],"participant":[124],"was":[125],"presented":[126],"scenarios,":[129],"that":[134,229],"differ":[135],"regard":[137],"those":[139],"design,":[143],"followed":[144],"post-session":[147],"interview.":[148],"Thematic":[149],"analysis":[150],"revealed":[151],"13":[152],"themes":[153],"across":[154],"from":[159,241],"analysis,":[161],"insights":[163],"emerged.":[164],"For":[165],"instance,":[166],"timing":[167],"changes":[168],"context":[170],"which":[172],"users":[173,240],"frame":[174],"concern:":[176],"rather":[177],"than":[178],"being":[179],"concerned":[180],"about":[181,218],"potential":[183],"consequences":[184],"clicking":[186],"\u2014as":[187],"intends\u2014":[190],"become":[192],"suspicious":[193],"app":[196],"displaying":[197],"message,":[199],"fearing":[200],"it":[201],"may":[202],"invade":[203],"privacy":[205],"violate":[207],"security.":[209],"Our":[210],"findings":[211],"form":[212],"basis":[214],"for":[215],"future":[216],"research":[217],"how":[219],"implement":[223],"mechanisms,":[224],"such":[225],"as":[226],"apps,":[228],"more":[231,236],"adaptable,":[232],"targeted,":[233],"potentially":[235],"effective":[237],"protecting":[239],"attacks.":[243]},"counts_by_year":[],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2025-12-11T00:00:00"}