Benchmarking the Robustness of Phishing Email Detection Systems

2023 | Americas Conference on Information Systems | Citations: 0

Authors: Ampel, Benjamin; Gao, Yang; Hu, James; Samtani, Sagar; Chen, Hsinchun

Abstract: Social engineering attacks are currently the most cited cybersecurity threat to ... Expand

Abstract: Social engineering attacks are currently the most cited cybersecurity threat to organizations. Phishing emails are the most salient form of social engineering attacks. Organizations are increasingly implementing AI-enabled systems to detect phishing emails. However, AI-enabled systems are often susceptible to textual perturbations, where an adversary makes a small change to cause a misclassification. In this study, we sought to identify the performance of prevailing phishing email detection systems (PEDS) against character, word, sentence, and multi-level adversarial text perturbations. Through a principled benchmarking framework, we quantitatively demonstrated the lack of robustness prevailing PEDS have to specific types of text-based adversarial perturbations (e.g., character, word, sentence, multi-level). The results of this study provide new insights into the robustness of AI-based PEDS and highlight the need for organizations to adopt a multi-layered approach to phishing protection. Additionally, organizations can implement our benchmark framework to test their PEDS against adversarial perturbations. Collapse

Topics: artificial intelligence electronic mail email phishing phishing IT security

Methods: word2vec random forest classification naïve bayes literature study pre-trained language model

Uniting Through Difference: Rich Cultural-Identity Expression as a Conduit to Inclusion

2023 | Organization Science | Citations: 0

Authors: Arnett, Rachel D.

Abstract: Although previous research suggests that bringing attention to minority cultural ... Expand

Abstract: Although previous research suggests that bringing attention to minority cultural identities in the workplace can lead to professional penalties, this research provides promising evidence that the opposite can occur. I examine how cultural minority employees engaging in rich and meaningful conversations about their racial, ethnic, and national backgrounds (referred to as rich cultural-identity expression) influences majority-group coworkers’ inclusive behaviors, such as majority-group employees’ willingness to socially integrate with and professionally support minority coworkers. Three experiments found evidence of majority-group employees behaving more—not less—inclusively toward minority coworkers who engaged in rich cultural-identity expression, as opposed to small talk that did not bring attention to a minority cultural background. Even when minority employees richly expressed negatively valenced cultural information that could provoke anxiety (such as issues with discrimination), this form of sharing had positive effects on most measures of inclusive behavior in Studies 2 and 3 (although one exception was found in Study 3). No benefits were observed when minority employees engaged in surface-level cultural-identity expression (Studies 2 and 3) and intimate, noncultural self-disclosure (Study 2). The power of rich cultural-identity expression is its ability to increase majority-group individuals’ status perceptions of, feelings of closeness to, and sense of learning potential from minority coworkers. This research provides promising evidence that minority employees may be able to express valued aspects of their cultural identities while gaining—as opposed to jeopardizing—inclusion. Funding: This work was supported by the Wharton Behavioral Laboratory and the Wharton Dean’s Research Fund. Supplemental Material: The e-companion is available at https://doi.org/10.1287/orsc.2022.1648. Collapse

Topics: electronic mail accounting identity management IT career pandemic

Methods: experiment survey ANOVA parametric test data transformation

The Interplay of Information Processing, Mindfulness, and Affective State in Phishing Detection

2023 | International Conference on Information Systems | Citations: 0

Authors: Bera, Debalina; Kim, Dan

Abstract: This study investigates the effect of individuals' information processing modes ... Expand

Abstract: This study investigates the effect of individuals' information processing modes on phishing email detection mechanisms and accuracy. Drawing on the heuristic-systematic model of processing, mindful decision-making, and affect-and-persuasion literature, this study examines the antecedents (i.e., heuristic, systematic processing, general and domain mindfulness, and affective state) and behavioral consequences (i.e., detection accuracy) in phishing identification. Using a scenario-based survey experiment this study shows mindfulness and affectivity navigate information processing mechanisms, thus influence phishing detection accuracy. It aims to contribute to information security literature by examining novel associations between general, domain mindfulness and its effect on online users' information processing strategy and phishing detection accuracy. Furthermore, this study contributes to phishing training and awareness by identifying the function of cognitive-affective (affective states, trait mindfulness) and cognitive-behavioral (domain mindfulness) factors on the choice of information processing modes and phishing detection accuracy. Finally, the affective states might help improve the efficacy of automatic filters. Collapse

Topics: phishing mindfulness electronic mail email phishing data security

Methods: experiment survey partial least squares regression machine learning laboratory experiment

Theories: protection motivation theory

Whistleblowing and Group Affiliation: The Role of Group Cohesion and the Locus of the Wrongdoer in Reporting Decisions

2023 | Organization Science | Citations: 0

Authors: Bergemann, Patrick; Aven, Brandy

Abstract: Conventional accounts describe whistleblowing as prosocial behavior, where whist ... Expand

Abstract: Conventional accounts describe whistleblowing as prosocial behavior, where whistleblowers are largely driven by a desire to help or improve their organization. Yet individuals are not only members of their organization; they also belong to internal social groups that affect behavior and influence decision making. In this paper, we focus on these intraorganizational dynamics and theorize two ways in which group affiliations are likely to affect whistleblowing. When an individual observes wrongdoing committed by a person affiliated with the same group, higher group cohesion decreases the likelihood of blowing the whistle because of potential whistleblowers’ greater loyalties toward group members and a desire to protect the reputation of the group. When an individual observes wrongdoing committed by a person not affiliated with the same group, higher group cohesion increases the likelihood of blowing the whistle, as potential whistleblowers feel they have the support of fellow group members, lessening fears of retaliation. Using unique data on actual and hypothetical whistleblowing among U.S. federal employees in 24 departments and agencies coupled with a vignette experiment, we find support for our arguments. By showing how group affiliations inform whistleblowing decisions, we reveal how variation in social structure leads to heterogeneity in responses to wrongdoing. Together, these results reveal tradeoffs in the detection of misconduct and help explain why wrongdoing in organizations may be so difficult to eradicate. Collapse

Topics: anonymity missing data electronic mail

Methods: survey experiment hierarchical linear modeling mixed method theory development

Can Fact-Checking Influence User Beliefs About Misinformation Claims: An Examination of Contingent Effects

2023 | Management Information Systems Quarterly | Citations: 0

Authors: Bhattacherjee, Anol

Abstract: Prior research has suggested that corrective fact-checking has inconsistent eff ... Expand

Abstract: Prior research has suggested that corrective fact-checking has inconsistent effects on beliefs about online misinformation claims. This study attempts to explain this inconsistency using three contingent factorsclaim-source credibility, fact-checker credibility, and attitude strength-which respectively relate to three key parties in the fact-checking process: the source of a misleading claim, the fact-checker, and the user evaluating the fact-check. I hypothesize the interplay between these factors, which is tested using two online experiments on COVID-19-related misinformation with over 900 participants. Multilevel analysis of pretest-posttest, repeated measures data supports the hypothesized moderating effects and offers additional insights about how these effects vary between earlier versus later phases of misinformation cycles. The paper concludes with a discussion of contributions to research and practice. Collapse

Topics: misinformation pandemic BuzzFeed covid 19 user attitude

Methods: experiment regression analysis method longitudinal research statistical power analysis theoretical contribution

“Dear CEO and Board”: How Activist Investors’ Confidence in Tone Influences Campaign Success

2023 | Organization Science | Citations: 0

Authors: Brauer, Matthias; Wiersema, Margarethe; Binder, Philipp

Abstract: Activist hedge funds represent the most potent form of financial activism. Yet w ... Expand

Abstract: Activist hedge funds represent the most potent form of financial activism. Yet we do not fully understand how these activist investors, despite holding only a small stake in target firms, are able to influence management and the board to acquiesce to their demands, especially given the large uncertainty that their demands will improve shareholder value. Building on impression management (IM) theory, we propose that activist investors who express their concerns and demands with high confidence in their letters to target firms are likely to be perceived as knowledgeable and competent by the firm’s other shareholders, thus influencing the response of the firm’s management and board. In support of this theoretical proposition, results of our empirical analysis of 475 U.S. activist campaigns against U.S. companies between 2007 and 2019 suggest that confidence in tone in an activist’s letter, as a form of self-promotion, is positively associated with campaign success. We also observe that the positive association between confidence in tone in activist letters and campaign success is less for activists with greater success in prior campaigns and in campaigns with multiple activists. Our paper contributes to financial activism research by showing that activists’ verbal impression management can serve as an effective influence tactic in their campaigns. Our study also contributes to the emerging research stream on verbal IM by introducing a language attribute, confidence in tone, that has not been studied in management research and is distinct from past constructs examined in verbal IM research. Collapse

Topics: corporate governance strategic management organizational productivity decision making database system

Methods: descriptive statistic qualitative content analysis theory development linguistic analysis regression analysis method

Theories: behavioral theory

The Agency to Implement Voice: How Target Hierarchical Position and Competence Changes the Relationship Between Voice and Individual Performance

2023 | Organization Science | Citations: 0

Authors: Burris, Ethan R.; McClean, Elizabeth J.; Detert, Jim R.; Quigley, Tim J.

Abstract: Although voice is communication that is intended to benefit the performance of c ... Expand

Abstract: Although voice is communication that is intended to benefit the performance of collectives, little is known about the benefits or costs to individual task performance and what mechanisms drive these effects. Our research offers new theory to articulate and illustrate the conditions under which voice has positive versus negative effects on individual task performance by directly acknowledging that employees have many options for where to direct their ideas. We introduce an agency perspective on voice by theorizing that one fundamental reason why employees speak up is to generate the implementation of corrective action for issues affecting themselves and to the extent targets of voice have agency to facilitate action through implementation of voice, voicing employees should be more likely to realize performance benefits from speaking up. In a first field study, we present evidence that two characteristics—the hierarchical position of the voice target (boss versus peer) and the competence of the voice target—alter the relationship between voice and the voicing employee’s task performance. In a second field study, using an event-contingent design, we provide evidence of the unique mechanisms underlying how competent managers (via their resources) and competent peers (via their efficacy to act) affect how upward and sideways voices lead to idea implementation. We discuss the theoretical implications of these ideas and findings by highlighting how voice target characteristics influence not just the incidence of voice but also, its outcomes. Funding: This research benefited from financial support through the McCombs Research Excellence Grant. Collapse

Topics: task productivity team productivity individual productivity personality human resource management

Methods: survey statistical hypothesis test qualitative interview chi squared test factor analysis

Theories: social cognitive theory

Navigating the Paradox of IT Novelty and Strategic Conformity: The Moderating Role of Industry Dynamism

2023 | International Conference on Information Systems | Citations: 0

Authors: Chaturvedi, Devina; Kathuria, Abhishek; Andrade, Mariana; Saldanha, Terence

Abstract: Although achieving strategic distinctiveness is critical for firms in dynamic i ... Expand

Abstract: Although achieving strategic distinctiveness is critical for firms in dynamic industries, where the competitive landscape and market conditions frequently change, there is a paucity of research on the impact of information technology (IT) on a firm's strategic conformity (or distinctiveness). Motivated by the importance of strategic conformity and emergence of novel technologies, we draw on institutional theory and hypothesize that IT Novelty positively impacts strategic conformity. Second, drawing on resource-based view, we hypothesize that market dynamism and competitive dynamism negatively moderate the effect of IT Novelty on strategic conformity. Third, we hypothesize that the moderating impact is stronger for market dynamism than competitive dynamism. We find support for our hypotheses using a fifteen-year dataset from over 300 U.S. manufacturing firms. Our study contributes to theory and managerial practice by combining institutional and resource-based view perspectives to examine how IT Novelty shapes a firm's strategic conformity, particularly in dynamic industry conditions. Collapse

Topics: database system decision making artificial intelligence internet of things mobile system

Methods: longitudinal research autocorrelation analysis hierarchical linear modeling robustness check regression analysis method

Theories: resource based view of the firm institutional theory

Token Incentives in a Volatile Crypto Market: The Effects of Token Price Volatility on User Contribution

2023 | Journal of Management Information Systems | Citations: 0

Authors: Chen, Kun; Fan, Yifan; Liao, Shaoyi Stephen

Abstract: Crypto tokens, issued and managed via smart contracts, function as rewards in bl ... Expand

Abstract: Crypto tokens, issued and managed via smart contracts, function as rewards in blockchain systems to encourage user participation. Distinct from monetary incentives, token incentives are uncertain in reward magnitude due to the large swings in token prices on crypto markets. By focusing on token price volatility, this study investigates how the reward uncertainty affects user contribution in a tokenized digital platform. Our empirical setting is Steemit, a platform where bloggers write posts and share token rewards based on their posts' popularity. We find that while high token price volatility induces a large volume of blog posts, it diminishes post quality. The dichotomous effects are explained via two mechanisms: users' direct reactions to reward uncertainties and their indirect reactions, mediated by altered token preference amid volatility shocks. Deeply exploring this dynamic process, our results reveal that token price volatility facilitates a platform's network short-term effect but impairs long-term user creativity. Our empirical findings thus extend the literature on blockchain economics and cryptocurrencies and have practical implications for the design of incentive mechanisms on tokenized digital platforms. Collapse

Topics: blog blockchain digital platform cryptocurrency user behavior

Methods: longitudinal research instrumental variables estimation data transformation principal component analysis vector autoregression

Theories: motivation crowding theory

The Crisis in Local Newspapers and Organizational Wrongdoing: The Role of Community Social Connectedness

2023 | Organization Science | Citations: 0

Authors: Choi, Tony Jaehyun; Valente, Mike

Abstract: Drawing on institutional anomie theory, we examine how the crisis in local newsp ... Expand

Abstract: Drawing on institutional anomie theory, we examine how the crisis in local newspapers has induced organizational wrongdoings in local communities. We argue that, because local newspapers are the primary source of accountability journalism in local communities, their decline leads to an anomic state that increases the scale of organizational wrongdoing. We also investigate whether institutional complementarity helps overcome the anomic state: Due to functional similarity, community social connectedness compensates for the scarcity of local newspapers. Our analysis of U.S. metropolitan areas for the period of 2007–2015 reveals that the positive relationship between local newspaper scarcity and the scale of organizational wrongdoing is not present in all communities but does appear when a community lacks community social connectedness. We also find that this moderating role of community social connectedness is observed only for internal organizational wrongdoings that are less visible to the public than external ones. Collapse

Topics: digital news missing data decision making social capital database system

Methods: descriptive statistic statistical hypothesis test longitudinal research longitudinal data analysis hierarchical linear modeling

Theories: organizational behavior theory