社交情境对鱼叉式网络钓鱼易感性影响的组态效应研究

Research on Configuration Effect of Social Context on the Susceptibility of Spear Phishing

为降低鱼叉式网络钓鱼的严重危害,通过有意情境诱导与无意情境卷入的交互,探究互联网社交情境中鱼叉式网络钓鱼的易感性。基于人际欺骗理论提出社交情境对鱼叉式网络钓鱼易感性影响的组态模型,聚焦钓鱼者有意情境诱导和被钓者无意情境卷入的交互,采用必要条件分析法和定性比较分析法对研究假设进行实证检验。实证分析得出两类鱼叉式网络钓鱼易感性构型,即钓鱼者高信息嵌入诱导、高偏好匹配诱导和被钓者高社交信息卷入构型以及钓鱼者高信息嵌入诱导、高信任诱导和被钓者高主题卷入构型。研究结果从社交情境视角将鱼叉式网络钓鱼易感性情境从组织内拓展至组织外,结合人际欺骗从组态视角将情境对鱼叉式网络钓鱼易感性的影响从单向扩展到有意情境诱导和无意情境卷入的双向交互,推进了影响鱼叉式网络钓鱼易感性的情境研究,为降低鱼叉式网络钓鱼易感性提供了一定参考。

In order to reduce the serious harm of harpoon phishing,this paper explores the susceptibility of harpoon phishing in Internet social situations through the interaction of intentional situation induction and unintentional situation involvement.Based on the theory of interpersonal deception,a configuration model is proposed to investigate the influence of social context on susceptibility to spear phishing.The model focuses on the interaction between intentional situational induction by anglers and unintentional situational involvement by anglers.Necessary condition analysis and qualitative comparative analysis are used to empirically test the research hypothesis.Empirical analysis has identified two types of susceptibility configurations for spear phishing,namely high information embedding induction by anglers,high preference matching induction,and high social information involvement configuration by anglers,as well as high information embedding induction by anglers,high trust induction,and high thematic involvement configuration by anglers.The research results extended the susceptibility of spear phishing from within the organization to outside the organization from a social context perspective,and combined with interpersonal deception from a configuration perspective,extended the influence of context on susceptibility to spear phishing from a one-way perspective to a two-way interaction of intentional context induction and unintentional context involvement.This promoted the study of context that affects susceptibility to spear phishing and provided some reference for reducing susceptibility to spear phishing.