Personality traits as predictors of vulnerability to persuasion in social engineering amongst risk-aware targets
<p dir="ltr">Many cybersecurity advancements involve personalizing security measures. These measures often leverage individual differences to create tailored solutions, such as custom cybersecurity training programs. This study examines persuasion in social engineering (SE) attacks,...
محفوظ في:
| المؤلف الرئيسي: | |
|---|---|
| مؤلفون آخرون: | , , , |
| منشور في: |
2025
|
| الموضوعات: | |
| الوسوم: |
إضافة وسم
لا توجد وسوم, كن أول من يضع وسما على هذه التسجيلة!
|
| _version_ | 1864513531960885248 |
|---|---|
| author | Aya Muhanad (22827410) |
| author2 | Israa Abuelezz (17541834) Raseena Haris (22827413) Khaled M. Khan (16888788) Raian Ali (12066006) |
| author2_role | author author author author |
| author_facet | Aya Muhanad (22827410) Israa Abuelezz (17541834) Raseena Haris (22827413) Khaled M. Khan (16888788) Raian Ali (12066006) |
| author_role | author |
| dc.creator.none.fl_str_mv | Aya Muhanad (22827410) Israa Abuelezz (17541834) Raseena Haris (22827413) Khaled M. Khan (16888788) Raian Ali (12066006) |
| dc.date.none.fl_str_mv | 2025-07-08T03:00:00Z |
| dc.identifier.none.fl_str_mv | 10.1007/s00607-025-01521-z |
| dc.relation.none.fl_str_mv | https://figshare.com/articles/journal_contribution/Personality_traits_as_predictors_of_vulnerability_to_persuasion_in_social_engineering_amongst_risk-aware_targets/30859829 |
| dc.rights.none.fl_str_mv | CC BY 4.0 info:eu-repo/semantics/openAccess |
| dc.subject.none.fl_str_mv | Information and computing sciences Cybersecurity and privacy Psychology Social and personality psychology Social engineering Human factors Personality traits Persuasion Cybersecurity training Vignette |
| dc.title.none.fl_str_mv | Personality traits as predictors of vulnerability to persuasion in social engineering amongst risk-aware targets |
| dc.type.none.fl_str_mv | Text Journal contribution info:eu-repo/semantics/publishedVersion text contribution to journal |
| description | <p dir="ltr">Many cybersecurity advancements involve personalizing security measures. These measures often leverage individual differences to create tailored solutions, such as custom cybersecurity training programs. This study examines persuasion in social engineering (SE) attacks, one of the most prevalent forms of cyberattacks today, and their connection to human factors, using a vignette-based approach. We investigate how personality traits can predict susceptibility to persuasion in potential SE scenarios. Cialdini’s six principles of persuasion are frequently found in SE attacks and serve as our conceptual framework. Data was collected through an online study involving 329 participants from the Arab Gulf Cooperation Council (GCC) countries and 322 from the United Kingdom (UK). Participants’ personality traits were evaluated using a validated 10-item scale based on the Big-5 model. They were presented with 12 scenarios: six that included one of the persuasion principles and six where the corresponding principle was neutralized. Participants were then asked about their level of trust in the potential social engineer and their likelihood of complying with the online request. We analyzed the data using regression to assess the effect of personality traits on susceptibility. The findings indicate that personality traits are weak predictors of susceptibility to persuasion in SE scenarios across both samples, suggesting that they may not be critical factors to consider when developing customized solutions. Additionally, we found no significant differences in vulnerability between the Arab and UK samples. We discuss the potential reasons behind these findings and suggest other factors to consider when designing adaptive cybersecurity solutions.</p><h2>Other Information</h2><p dir="ltr">Published in: Computing<br>License: <a href="https://creativecommons.org/licenses/by/4.0" target="_blank">https://creativecommons.org/licenses/by/4.0</a><br>See article on publisher's website: <a href="https://dx.doi.org/10.1007/s00607-025-01521-z" target="_blank">https://dx.doi.org/10.1007/s00607-025-01521-z</a></p> |
| eu_rights_str_mv | openAccess |
| id | Manara2_7d479aedb946437cc113d0fc8343d12e |
| identifier_str_mv | 10.1007/s00607-025-01521-z |
| network_acronym_str | Manara2 |
| network_name_str | Manara2 |
| oai_identifier_str | oai:figshare.com:article/30859829 |
| publishDate | 2025 |
| repository.mail.fl_str_mv | |
| repository.name.fl_str_mv | |
| repository_id_str | |
| rights_invalid_str_mv | CC BY 4.0 |
| spelling | Personality traits as predictors of vulnerability to persuasion in social engineering amongst risk-aware targetsAya Muhanad (22827410)Israa Abuelezz (17541834)Raseena Haris (22827413)Khaled M. Khan (16888788)Raian Ali (12066006)Information and computing sciencesCybersecurity and privacyPsychologySocial and personality psychologySocial engineeringHuman factorsPersonality traitsPersuasionCybersecurity trainingVignette<p dir="ltr">Many cybersecurity advancements involve personalizing security measures. These measures often leverage individual differences to create tailored solutions, such as custom cybersecurity training programs. This study examines persuasion in social engineering (SE) attacks, one of the most prevalent forms of cyberattacks today, and their connection to human factors, using a vignette-based approach. We investigate how personality traits can predict susceptibility to persuasion in potential SE scenarios. Cialdini’s six principles of persuasion are frequently found in SE attacks and serve as our conceptual framework. Data was collected through an online study involving 329 participants from the Arab Gulf Cooperation Council (GCC) countries and 322 from the United Kingdom (UK). Participants’ personality traits were evaluated using a validated 10-item scale based on the Big-5 model. They were presented with 12 scenarios: six that included one of the persuasion principles and six where the corresponding principle was neutralized. Participants were then asked about their level of trust in the potential social engineer and their likelihood of complying with the online request. We analyzed the data using regression to assess the effect of personality traits on susceptibility. The findings indicate that personality traits are weak predictors of susceptibility to persuasion in SE scenarios across both samples, suggesting that they may not be critical factors to consider when developing customized solutions. Additionally, we found no significant differences in vulnerability between the Arab and UK samples. We discuss the potential reasons behind these findings and suggest other factors to consider when designing adaptive cybersecurity solutions.</p><h2>Other Information</h2><p dir="ltr">Published in: Computing<br>License: <a href="https://creativecommons.org/licenses/by/4.0" target="_blank">https://creativecommons.org/licenses/by/4.0</a><br>See article on publisher's website: <a href="https://dx.doi.org/10.1007/s00607-025-01521-z" target="_blank">https://dx.doi.org/10.1007/s00607-025-01521-z</a></p>2025-07-08T03:00:00ZTextJournal contributioninfo:eu-repo/semantics/publishedVersiontextcontribution to journal10.1007/s00607-025-01521-zhttps://figshare.com/articles/journal_contribution/Personality_traits_as_predictors_of_vulnerability_to_persuasion_in_social_engineering_amongst_risk-aware_targets/30859829CC BY 4.0info:eu-repo/semantics/openAccessoai:figshare.com:article/308598292025-07-08T03:00:00Z |
| spellingShingle | Personality traits as predictors of vulnerability to persuasion in social engineering amongst risk-aware targets Aya Muhanad (22827410) Information and computing sciences Cybersecurity and privacy Psychology Social and personality psychology Social engineering Human factors Personality traits Persuasion Cybersecurity training Vignette |
| status_str | publishedVersion |
| title | Personality traits as predictors of vulnerability to persuasion in social engineering amongst risk-aware targets |
| title_full | Personality traits as predictors of vulnerability to persuasion in social engineering amongst risk-aware targets |
| title_fullStr | Personality traits as predictors of vulnerability to persuasion in social engineering amongst risk-aware targets |
| title_full_unstemmed | Personality traits as predictors of vulnerability to persuasion in social engineering amongst risk-aware targets |
| title_short | Personality traits as predictors of vulnerability to persuasion in social engineering amongst risk-aware targets |
| title_sort | Personality traits as predictors of vulnerability to persuasion in social engineering amongst risk-aware targets |
| topic | Information and computing sciences Cybersecurity and privacy Psychology Social and personality psychology Social engineering Human factors Personality traits Persuasion Cybersecurity training Vignette |