Impact of security awareness training on phishing click-through rates

In this paper we study the impact that security awareness training has on the people who click on malicious links contained in phishing emails. Phishing is a criminal activity in which social engineering techniques and technology are used to obtain personal information without one's consent. Currently, anti-phishing techniques have little academic backing, usually only statistics and testimonials from security organizations. This paper aims to provide an educational standard by which the usefulness of internet security awareness and anti-phishing techniques can be compared in the future.