Supporting the Design of Phishing Education, Training and Awareness interventions: an LLM-based approach

TY - CHAP

T1 - Supporting the Design of Phishing Education, Training and Awareness interventions: an LLM-based approach

AU - Desolda, Giuseppe

AU - Greco, Francesco

AU - Viganò, Luca

PY - 2024/5/1

Y1 - 2024/5/1

N2 - Phishing remains one of the most effective cyber threats in our digital world, affecting millions of organizations. Phishing education, training, and awareness programs are used to address employees’ lack of knowledge about phishing attacks. However, despite being very expensive, these interventions are not always effective, mainly due to the lack of customization of training materials based on the employees’ needs and profiles. In fact, creating customized training content for each employee and each context would require a huge effort from security practitioners and educators thus increasing costs even more. The proposal we present in this paper is to use Large Language Models to automate some steps in the design process of training content, which is tailored to the specific user profile.

AB - Phishing remains one of the most effective cyber threats in our digital world, affecting millions of organizations. Phishing education, training, and awareness programs are used to address employees’ lack of knowledge about phishing attacks. However, despite being very expensive, these interventions are not always effective, mainly due to the lack of customization of training materials based on the employees’ needs and profiles. In fact, creating customized training content for each employee and each context would require a huge effort from security practitioners and educators thus increasing costs even more. The proposal we present in this paper is to use Large Language Models to automate some steps in the design process of training content, which is tailored to the specific user profile.

M3 - Conference paper

BT - 2nd International Workshop on CyberSecurity Education for Industry and Academia (CSE4IA 2024)

PB - CEUR Workshop Proceedings

ER -