← Research portfolio

Human-centered security

Cybertrust & PhishFinders

Understanding deception to design better defenses.

StatusResearch complete · citizen-science project availableDates2015–2022RolePI
Open public resource
Publiclabeled dataset
Humantrust research
Appliedtraining tools

Cybertrust is a simulation platform for phishing research experiments. It presents realistic malicious and innocuous web content, captures how people perceive and trust it, and trains participants to improve future decisions.

Research with 80 participants and more than 5,400 trust decisions produced a victimization-prediction model based on structural indicators of trust. Later work incorporated eye tracking and interaction capture to study why users fall for phishing and how training can intervene.

PhishFinders extended this work through citizen science, inviting a broader community to label phishing cues and contribute to public training data.