Lab Lunch: 5 March 2019 - Kami Vaniea

Title: URLS and Phishing

Abstract:

I'll be discussing some of my research into URLs, including how people read them and what it actually takes to determine where a URL leads. Phishing, tricking people into interacting with malicious communications, is one of the largest sources of security compromise and something many organizations train their employees to spot. Yet reports show that any given phishing campaign will still have 4% of employees click on it. We hypothesize that one of the reasons people struggle to spot phishing is that they cannot read the URLs in the email and incorrectly believe they are going to one place when actually they are going to another.