The Human Factor of Information Security: Phishing in Cybercrime

Abstract

This study investigates public awareness of phishing practices in Hungary, emphasizing the evolving landscape of cybercrime and the strategic importance of information in contemporary society. The research examines the methods and factors contributing to successful phishing schemes, employing statistical data to enhance understanding and defense mechanisms against such attacks. By delving into the techniques and psychological triggers used to deceive victims, the study aims to provide a comprehensive view of phishing threats. The research explores whether demographic differences, education, and internet use influence susceptibility to phishing attacks. Two primary assumptions are tested: that demographic factors affect knowledge and attitudes about phishing, and that individuals frequently fail to recognize phishing attempts. Highlighting the importance of process-based protection over purely technical tools, the study stresses that user decisions and knowledge are crucial in defending against phishing. Process-based security, including blocking malicious sites and notifying users, is essential, with a significant responsibility resting on service providers, state, and national security agencies. However, the user's role is critical as the weakest link in the security chain. Technological advancements in defense methods are discussed, noting that as these methods become more effective, attackers shift their focus from systems to the personnel operating them. This shift underscores the increasing significance of the human factor in internet security. Phishing incidents often go unreported as companies prefer to absorb losses rather than reveal vulnerabilities, fearing significant customer loss. The study emphasizes the value of information, both as a target for criminals and as crucial knowledge for prevention. Protecting data and disseminating knowledge are essential tasks in combating IT crime, underscoring the need for ongoing research and awareness.