Evaluating Students’ Vulnerability and Awareness to Phishing Attacks in Educational Institutions

Abstract

The rapid growth of the internet has made students increasingly susceptible to phishing attacks, posing risks such as identity theft, financial fraud, and other cybercrimes. Reports indicate that these phishing attacks increasingly target universities and students in higher education institutions (a case study of final engineering students). The objective of this study is to assess the susceptibility and knowledge of students towards phishing attacks through the configuration and analysis of a phishing framework. The methodology encompassed the establishment of a phishing campaign specifically designed to target the academic setting of the students, followed by an assessment of their reactions to the phishing emails. An online survey was conducted to assess students' cyber security comprehension level and their responses to phishing emails. The findings of this study indicate that a significant proportion of students’ exhibit susceptibility to phishing attacks and demonstrate a lack of awareness regarding the nature of phishing emails. In conclusion the study enhanced students' awareness of cyber security concerns and equip them with the necessary knowledge to safeguard themselves against phishing attacks in both educational settings and real-world scenarios.