Applying Research to Practice: What Really Works in Antiphishing Training

Carnegie Mellon University's Information Security Office collaborated with researchers from CyLab Usable Privacy and Security Laboratory (CUPS) to study why faculty, staff, and students fall for phishing scams and how best to educate them about phishing. The study's design and conclusions will be presented along with the status of the resulting phishing awareness program.