Paper Type
ERF
Abstract
Smishing is a phishing attack that targets users through mobile devices, which creates a uniquely personal and inherently trusted environment. In this context, users respond quickly and habitually, making them especially susceptible to social engineering tactics. This immediacy enables attackers to exploit cognitive and psychological vulnerabilities effectively, highlighting the urgent need for dedicated research on smishing. This research introduces the Cognitive Dissonance and Persuasion Framework for Smishing (CDP-S), which integrates Persuasion Theory and Cognitive Dissonance Theory to explore how persuasive message techniques interact with human vulnerabilities and influence smishing susceptibility. The research aims to advance cybersecurity behavioral studies by establishing a persuasion-based paradigm for understanding human vulnerability in mobile phishing contexts.
Paper Number
1396
Recommended Citation
Xie, Wei; Iyer, Lakshmi; and Bera, Debalina, "Cognitive Dissonance and Persuasion for Smishing (CDP-S): A Conceptual Framework" (2025). AMCIS 2025 Proceedings. 10.
https://aisel.aisnet.org/amcis2025/sig_sec/sig_sec/10
Cognitive Dissonance and Persuasion for Smishing (CDP-S): A Conceptual Framework
Smishing is a phishing attack that targets users through mobile devices, which creates a uniquely personal and inherently trusted environment. In this context, users respond quickly and habitually, making them especially susceptible to social engineering tactics. This immediacy enables attackers to exploit cognitive and psychological vulnerabilities effectively, highlighting the urgent need for dedicated research on smishing. This research introduces the Cognitive Dissonance and Persuasion Framework for Smishing (CDP-S), which integrates Persuasion Theory and Cognitive Dissonance Theory to explore how persuasive message techniques interact with human vulnerabilities and influence smishing susceptibility. The research aims to advance cybersecurity behavioral studies by establishing a persuasion-based paradigm for understanding human vulnerability in mobile phishing contexts.
When commenting on articles, please be friendly, welcoming, respectful and abide by the AIS eLibrary Discussion Thread Code of Conduct posted here.
Comments
SIGSEC