Studying user's computer security behaviour in developing an effective antiphishing educational framework

In recent years, cybercrime has focused profoundly on people to bypass existing sophisticated security controls; phishing is one of the most common forms of such attacks. Phishing is an online extortion which combines social engineering tools and technical tricks designed to earn computer users' hypersensitive personally identifiable information (PII). To prevent from phishing attacks, phishing awareness needs to be considered. This research aims to highlights the problem of phishing and to examine the user's computer security behaviour in developing an anti-phishing educational framework. The paper introduces Technology Threat Avoidance Theory (TTAT): a theoretical model which is used to address various design issues and principles that were used as guidelines for structuring and presenting information.