Discipline
Cybersecurity
Methodology
Date
12 Nov 2024
Description
The threat of phishing and loss of money to scammers is a global issue affecting businesses and individuals alike. The problem is of particular concern to the tropical nation of Singapore, which has embraced digital services and the development of a Smart Nation. With these technical advances come increased risks, exacerbated by rapid change and external attacks that are difficult to prevent without heightened vigilance. In 2022, phishing attempts in Singapore rose 175%. Cybersecurity and phishing awareness techniques have been used to improve the security posture of companies and individuals, making them less likely to be phished or fall victim to a scam, but frequent refreshers and adaptations are needed to maintain their effectiveness. Authentication methods such as multi-factor authentication, password-less login and security keys have made account hijacking harder, but circumventions continue to be developed and used. One of the biggest challenges is overcoming familiarity and process fatigue, where individuals perform actions they are used to doing before they have time to critically analyse those actions. In other critical disciplines, such as rail operation, techniques such as point and call may be used to affirm the actions being taken and information being observed. This project proposes to draw upon this and other similar approaches, not necessarily borne out of the world of IT, to create stronger anti-phishing and anti-scam safety nets that enable users to affirm their actions and validate the legitimacy of what they believe to be happening. Ultimately, we seek to answer the research question: How can we give a user full confidence in what actions they are taking online?
Keywords
UX;Web Technologies;Phishing;Authentication
Would Suit Applicants Who
Suitable candidates will have an interest in authentication technologies, web/network protocols, web/mobile app development and UX design. Strong foundational skills in at least two of these areas will be necessary, with the expectation that a suitably motivated candidate can expand their skillset during their pursuit of this research question.