Skip to main content

LUP Student Papers

LUND UNIVERSITY LIBRARIES

Perceived versus Actual Phishing Detection

Palm, Johannes LU ; Palenryd, Isac LU and Claesson, Jonathan LU (2026) SYSK16 20261
Department of Informatics
Abstract
This study investigates the relationship between students’ perceived confidence in handling phishing emails and their responses to simulated phishing attempts, with a particular focus on differences between IT and non-IT students. Using a primarily quantitative survey consisting of seven simulated email scenarios, the study examines how students distinguish between legitimate and potentially malicious emails.
The findings indicate that participants generally adopted cautious behavior, often choosing to ignore or report suspicious messages. However, unsafe behaviors remained present across all groups. A notable finding was the mismatch between confidence and decision accuracy, as several participants expressed high certainty in decisions... (More)
This study investigates the relationship between students’ perceived confidence in handling phishing emails and their responses to simulated phishing attempts, with a particular focus on differences between IT and non-IT students. Using a primarily quantitative survey consisting of seven simulated email scenarios, the study examines how students distinguish between legitimate and potentially malicious emails.
The findings indicate that participants generally adopted cautious behavior, often choosing to ignore or report suspicious messages. However, unsafe behaviors remained present across all groups. A notable finding was the mismatch between confidence and decision accuracy, as several participants expressed high certainty in decisions that were objectively unsafe, suggesting the presence of overconfidence bias. The results also revealed only limited differences between IT and non-IT students, indicating that technical background alone does not eliminate phishing susceptibility. In addition, situational factors such as perceived urgency and personal relevance were found to influence participant behavior.
The study concludes that phishing susceptibility is shaped by a combination of psychological, behavioral, and contextual factors, highlighting the importance of cybersecurity education that addresses both technical awareness and human decision-making. (Less)
Please use this url to cite or link to this publication:
author
Palm, Johannes LU ; Palenryd, Isac LU and Claesson, Jonathan LU
supervisor
organization
alternative title
An analysis between IT and Non-IT Students
course
SYSK16 20261
year
type
M2 - Bachelor Degree
subject
keywords
Email-phishing, Phishing susceptibility, University student, User behavior
language
English
id
9239442
date added to LUP
2026-06-16 13:12:24
date last changed
2026-06-16 13:12:24
@misc{9239442,
  abstract     = {{This study investigates the relationship between students’ perceived confidence in handling phishing emails and their responses to simulated phishing attempts, with a particular focus on differences between IT and non-IT students. Using a primarily quantitative survey consisting of seven simulated email scenarios, the study examines how students distinguish between legitimate and potentially malicious emails.
The findings indicate that participants generally adopted cautious behavior, often choosing to ignore or report suspicious messages. However, unsafe behaviors remained present across all groups. A notable finding was the mismatch between confidence and decision accuracy, as several participants expressed high certainty in decisions that were objectively unsafe, suggesting the presence of overconfidence bias. The results also revealed only limited differences between IT and non-IT students, indicating that technical background alone does not eliminate phishing susceptibility. In addition, situational factors such as perceived urgency and personal relevance were found to influence participant behavior.
The study concludes that phishing susceptibility is shaped by a combination of psychological, behavioral, and contextual factors, highlighting the importance of cybersecurity education that addresses both technical awareness and human decision-making.}},
  author       = {{Palm, Johannes and Palenryd, Isac and Claesson, Jonathan}},
  language     = {{eng}},
  note         = {{Student Paper}},
  title        = {{Perceived versus Actual Phishing Detection}},
  year         = {{2026}},
}