Simulation of phishing attacks as a method of increasing cyber literacy and preparing to respond to threats

Abstract

Despite the availability of modern security technologies, the success of attacks often depends on the level of training of employees. Improper behavior when faced with cyber threats can lead to serious consequences, such as data leakage or disruption of the organization. Phishing attacks are one of the most common threats to cybersecurity. They are an attempt to deceive users in order to obtain confidential information

such as passwords, bank card information, «secret» information and other personal information. Improving employee cybersecurity is a key element of protection against phishing. One of the most effective methods of raising awareness is conducting phishing attack simulations. Simulating phishing attacks is an effective method of increasing employees' cyber literacy and preparing them to respond to real threats. This approach allows you to simulate attacks that can happen in real life, and gives employees the opportunity to train in a safe environment, which helps to develop the necessary skills and raise awareness of the risks. The purpose of this study is to study the effectiveness of phishing attack simulation as a method of increasing cyber literacy and training employees to respond to real threats. We will look at the main aspects of conducting such simulations, their impact on user behavior, and possible improvements in the learning process. Let's make a comparative analysis of the existing training platforms. Let's consider the algorithm for conducting attack simulations and highlight the main goals and objectives of attack simulations using a real experiment conducted at the company. Let's define the pedagogical value of phishing attack simulations.