{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,15]],"date-time":"2026-10-15T15:05:45Z","timestamp":1792076745954,"version":"4.4.0"},"reference-count":72,"publisher":"Springer Science and Business Media LLC","issue":"5","license":[{"start":{"date-parts":[[2025,7,1]],"date-time":"2025-07-01T00:00:00Z","timestamp":1751328000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0"},{"start":{"date-parts":[[2025,7,1]],"date-time":"2025-07-01T00:00:00Z","timestamp":1751328000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J. King Saud Univ. Comput. Inf. Sci."],"published-print":{"date-parts":[[2025,7]]},"DOI":"10.1007\/s44443-025-00067-6","type":"journal-article","created":{"date-parts":[[2025,7,1]],"date-time":"2025-07-01T11:49:28Z","timestamp":1751370568000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["ByteBait USB: a robust simulation toolkit for badUSB phishing campaign"],"prefix":"10.1007","volume":"37","author":[{"ORCID":"https:\/\/orcid.org\/0009-0007-4342-6676","authenticated-orcid":false,"given":"Wenhao","family":"Li","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Selvakumar","family":"Manickam","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yung-Wey","family":"Chong","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yongqing","family":"He","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ho Yean","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Binyong","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,7,1]]},"reference":[{"key":"67_CR1","unstructured":"Adams M (2023) What Is the True Cost of a Successful Phishing Attack? | Warren Averett Technology Group; 2023. Accessed: Dec. 27, 2023. [Online]. Available: https:\/\/warrenaverett.com\/insights\/phishing-attack\/. Warren Averett CPAs & Advisors"},{"key":"67_CR2","unstructured":"Al-Daeef MM, Basir N, Saudi MM (2017) Security awareness training: A review. In: Lecture Notes in Engineering and Computer Science: Proceedings of The World Congress on Engineering London, U.K.: International Association of Engineers; p 446\u2013451. Available: https:\/\/www.iaeng.org\/publication\/WCE2017\/WCE2017_pp446-451.pdf"},{"issue":"11","key":"67_CR3","first-page":"6374","volume":"7","author":"AF Al-Otaibi","year":"2020","unstructured":"Al-Otaibi AF, Alsuwat ES (2020) A study on social engineering attacks: Phishing attack. Int J Recent Adv Multidiscip Res 7(11):6374\u20136380","journal-title":"Int J Recent Adv Multidiscip Res"},{"key":"67_CR4","doi-asserted-by":"publisher","unstructured":"Alhashmi AA, Darem A, Abawajy JH (2021) Taxonomy of Cybersecurity Awareness Delivery Methods: A Countermeasure for Phishing Threats. Int J Adv Comput Sci Appl 12(10). https:\/\/doi.org\/10.14569\/ijacsa.2021.0121004","DOI":"10.14569\/ijacsa.2021.0121004"},{"key":"67_CR5","doi-asserted-by":"publisher","unstructured":"Ansari MF, Sharma PK, Dash B (2022) Prevention of phishing attacks using AI-based Cybersecurity Awareness Training. Int J Smart Sens Adhoc Netw 3(6)https:\/\/doi.org\/10.47893\/IJSSAN.2022.1221","DOI":"10.47893\/IJSSAN.2022.1221"},{"key":"67_CR6","doi-asserted-by":"crossref","unstructured":"Arora L, Thakur N, Yadav SK (2021) USB Rubber Ducky Detection by using Heuristic Rules. In: 2021 International Conference on Computing, Communication, and Intelligent Systems (ICCCIS); p 156\u2013160","DOI":"10.1109\/ICCCIS51004.2021.9397064"},{"key":"67_CR7","doi-asserted-by":"crossref","unstructured":"Bakar NA, Mohd M, Sulaiman R (2017) Information leakage preventive training. In: 2017 6th International Conference on Electrical Engineering and Informatics (ICEEI); p 1\u20136","DOI":"10.1109\/ICEEI.2017.8312403"},{"key":"67_CR8","unstructured":"Bojovic PD, Basicevic I, Pilipovic M, Bojovic Z, Bojovic M (2019) The rising threat of hardware attacks: USB keyboard attack case study; Preprint at https:\/\/www.researchgate.net\/publication\/331312670"},{"key":"67_CR9","doi-asserted-by":"crossref","unstructured":"Breda F, Barbosa H, Morais T (2017) SOCIAL ENGINEERING AND CYBER SECURITY. In: INTED2017 Proceedings 11th International Technology, Education and Development Conference, IATED; p 4204\u20134211","DOI":"10.21125\/inted.2017.1008"},{"key":"67_CR10","doi-asserted-by":"publisher","unstructured":"Chatchalermpun S, Daengsi T (2021) Improving cybersecurity awareness using phishing attack simulation. IOP Conference Series: Mater Sci Eng. 2021 feb 1088(1):012015. https:\/\/doi.org\/10.1088\/1757-899X\/1088\/1\/012015","DOI":"10.1088\/1757-899X\/1088\/1\/012015"},{"issue":"3","key":"67_CR11","doi-asserted-by":"publisher","first-page":"2043","DOI":"10.1007\/s10207-024-00834-y","volume":"23","author":"AK Chillara","year":"2024","unstructured":"Chillara AK, Saxena P, Maiti RR, Gupta M, Kondapalli R, Zhang Z et al (2024) Deceiving supervised machine learning models via adversarial data poisoning attacks: a case study with USB keyboards. Int J Inf Secur 23(3):2043\u20132061. https:\/\/doi.org\/10.1007\/s10207-024-00834-y","journal-title":"Int J Inf Secur"},{"key":"67_CR12","doi-asserted-by":"crossref","unstructured":"Cronin P, Gao X, Wang H, Cotton C (2022) Time-Print: Authenticating USB Flash Drives with Novel Timing Fingerprints. In: 2022 IEEE Symposium on Security and Privacy (SP); p 1002\u20131017","DOI":"10.1109\/SP46214.2022.9833595"},{"key":"67_CR13","doi-asserted-by":"publisher","unstructured":"Darem A (2021) Anti-Phishing Awareness Delivery Methods. Engineering, Technology & Applied Science Research. 2021 Dec 11(6):7944\u20137949. https:\/\/doi.org\/10.48084\/etasr.4600","DOI":"10.48084\/etasr.4600"},{"issue":"2","key":"67_CR14","doi-asserted-by":"publisher","first-page":"311","DOI":"10.1177\/20438869231200284","volume":"14","author":"PM Datta","year":"2024","unstructured":"Datta PM, Acton T (2024) Did a USB drive disrupt a nuclear program? A Defense in Depth (DiD) teaching case. J Inf Technol Teach Cases 14(2):311\u2013321. https:\/\/doi.org\/10.1177\/20438869231200284","journal-title":"J Inf Technol Teach Cases"},{"issue":"2","key":"67_CR15","doi-asserted-by":"publisher","first-page":"136","DOI":"10.1007\/s41635-020-00092-z","volume":"4","author":"K Denney","year":"2020","unstructured":"Denney K, Babun L, Uluagac AS (2020) USB-Watch: a Generalized Hardware-Assisted Insider Threat Detection Framework. J Hardware Syst Secur. 4(2):136\u2013149. https:\/\/doi.org\/10.1007\/s41635-020-00092-z","journal-title":"J Hardware Syst Secur."},{"key":"67_CR16","unstructured":"Draschbacher F, Maar L, Oberhuber M, Mangard S (2025) CHOICEJACKING: Compromising Mobile Devices through Malicious Chargers like a Decade ago. In: 34th USENIX Security Symposium: USENIX Security 2025; https:\/\/www.usenix.org\/conference\/usenixsecurity25\/presentation\/draschbacher"},{"key":"67_CR17","unstructured":"Falliere N, Murchu LO, Chien E (2010) W32. Stuxnet Dossier; Available: https:\/\/www.pnfsoftware.com\/other\/w32_stuxnet_dossier.pdf. Report by Symantec"},{"key":"67_CR18","doi-asserted-by":"crossref","unstructured":"Gamisch L, P\u00f6hn D (2023) A Study of Different Awareness Campaigns in a Company. In: Proceedings of the 18th International Conference on Availability, Reliability and Security ARES \u201923, New York, NY, USA: Association for Computing Machinery","DOI":"10.1145\/3600160.3605006"},{"key":"67_CR19","unstructured":"Honeywell GARD (2024) USB Threat Report. Available https:\/\/hcenews.honeywell.com\/CYB-2024-Threat-Report-LP"},{"key":"67_CR20","doi-asserted-by":"crossref","unstructured":"Griscioli F, Pizzonia M, Sacchetti M (2016) USBCheckIn: Preventing BadUSB attacks by forcing human-device interaction. In: 2016 14th Annual Conference on Privacy, Security and Trust (PST). p 493\u2013496","DOI":"10.1109\/PST.2016.7907004"},{"key":"67_CR21","doi-asserted-by":"crossref","unstructured":"Guri M, Monitz M, Elovici Y (2016) USBee: Air-gap covert-channel via electromagnetic emission from USB. In: 2016 14th Annual Conference on Privacy, Security and Trust (PST). p 264\u2013268","DOI":"10.1109\/PST.2016.7906972"},{"key":"67_CR22","doi-asserted-by":"publisher","unstructured":"Guri M, Monitz M, Elovici Y (2017) Bridging the Air Gap between Isolated Networks and Mobile Phones in a Practical Cyber-Attack. ACM Trans Intell Syst Technol. 2017 May 8(4). https:\/\/doi.org\/10.1145\/2870641","DOI":"10.1145\/2870641"},{"key":"67_CR23","doi-asserted-by":"publisher","unstructured":"Guri M, Zadov B, Elovici Y (2020) ODINI: Escaping Sensitive Data From Faraday-Caged, Air-Gapped Computers via Magnetic Fields. IEEE Trans Inf Foren Secur. 15:1190\u20131203. https:\/\/doi.org\/10.1109\/TIFS.2019.2938404","DOI":"10.1109\/TIFS.2019.2938404"},{"key":"67_CR24","unstructured":"Hak5 (2022) USB Rubber Ducky by Hak5 - USB Rubber Ducky. https:\/\/docs.hak5.org\/hak5-usb-rubber-ducky"},{"key":"67_CR25","unstructured":"Hak5 (2023) Bash Bunny by Hak5. https:\/\/docs.hak5.org\/bash-bunny"},{"key":"67_CR26","unstructured":"Hak5 (2024) Hak5 PayloadStudio. https:\/\/payloadstudio.hak5.org\/community\/"},{"key":"67_CR27","doi-asserted-by":"publisher","unstructured":"Hillman D, Harel Y, Toch E (2023) Evaluating organizational phishing awareness training on an enterprise scale. Comput Secur 132:103364. https:\/\/doi.org\/10.1016\/j.cose.2023.103364","DOI":"10.1016\/j.cose.2023.103364"},{"key":"67_CR28","unstructured":"Howard M, Lipner S (2006) The security development lifecycle, vol\u00a08. Microsoft Press Redmond"},{"key":"67_CR29","unstructured":"IBM (2023) Cost of a Data Breach Report 2023. Available: https:\/\/www.securityhq.com\/reports\/cost-of-a-data-breach-report-2023\/. Report by IBM"},{"key":"67_CR30","doi-asserted-by":"publisher","unstructured":"Ibrahim OA, Sciancalepore S, Oligeri G, Pietro RD (2020) MAGNETO: Fingerprinting USB Flash Drives via Unintentional Magnetic Emissions. ACM Trans Embed Comput Syst. 2020 Dec 20(1). https:\/\/doi.org\/10.1145\/3422308","DOI":"10.1145\/3422308"},{"key":"67_CR31","doi-asserted-by":"publisher","unstructured":"Jampen D, G\u00fcr G, Sutter T, Tellenbach B (2020) Don\u2019t click: towards an effective anti-phishing training. A comparative literature review. Human-centric Comput Inf Sci 10(1):33 https:\/\/doi.org\/10.1186\/s13673-020-00237-7","DOI":"10.1186\/s13673-020-00237-7"},{"issue":"6","key":"67_CR32","doi-asserted-by":"publisher","first-page":"584","DOI":"10.1080\/0144929X.2011.632650","volume":"32","author":"K Jansson","year":"2013","unstructured":"Jansson K, von Solms R (2013) Phishing for phishing awareness. Behav Inf Technol 32(6):584\u2013593. https:\/\/doi.org\/10.1080\/0144929X.2011.632650","journal-title":"Behav Inf Technol"},{"key":"67_CR33","doi-asserted-by":"crossref","unstructured":"Jayakrishnan G, Banahatti V, Lodha S (2022) PickMail: a serious game for email Phishing Awareness training. In: Usable Security and Privacy (USEC) Symposium, vol 2022. Available: https:\/\/www.ndss-symposium.org\/wp-content\/uploads\/usec2022_23059_paper.pdf","DOI":"10.14722\/usec.2022.23059"},{"key":"67_CR34","unstructured":"Karantzas G (2023) Forensic Log Based Detection For Keystroke Injection\" BadUsb\" Attacks. Preprint at https:\/\/arxiv.org\/abs\/2302.04541"},{"key":"67_CR35","unstructured":"Kharraz A, Daley BL, Baker GZ, Robertson W, Kirda E (2019) USBESAFE: An End-Point Solution to Protect Against USB-Based Attacks. In: 22nd International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2019) Chaoyang District, Beijing: USENIX Association. p 89\u2013103. https:\/\/www.usenix.org\/conference\/raid2019\/presentation\/kharraz"},{"key":"67_CR36","doi-asserted-by":"publisher","unstructured":"Koffi KA, Smiliotopoulos C, Kolias C, Kambourakis G (2024) To (US)Be or Not to (US)Be: Discovering Malicious USB Peripherals through Neural Network-Driven Power Analysis. Electronics. 13(11). https:\/\/www.mdpi.com\/2079-9292\/13\/11\/2117,https:\/\/doi.org\/10.3390\/electronics13112117","DOI":"10.3390\/electronics13112117"},{"issue":"3","key":"67_CR37","doi-asserted-by":"publisher","first-page":"49","DOI":"10.1109\/MSP.2011.67","volume":"9","author":"R Langner","year":"2011","unstructured":"Langner R (2011) Stuxnet: Dissecting a Cyberwarfare Weapon. IEEE Secur Privacy. 9(3):49\u201351. https:\/\/doi.org\/10.1109\/MSP.2011.67","journal-title":"IEEE Secur Privacy."},{"key":"67_CR38","doi-asserted-by":"crossref","unstructured":"Li H, Lv Z, Zhang N, Zhang Y, Ye Q (2024) HID Detector: A New Detection Framework Against HID Attacks Based on Behavior Features. In: 2024 IEEE Symposium on Computers and Communications (ISCC). p 1\u20137","DOI":"10.1109\/ISCC61673.2024.10733727"},{"key":"67_CR39","doi-asserted-by":"crossref","unstructured":"Li W, He Y, Wang Z, Alqahtani S, Nanda P (2023a) Uncovering Flaws in Anti-Phishing Blacklists for Phishing Websites Using Novel Cloaking Techniques. In: Proceedings of the 20th International Conference on Security and Cryptography Rome, Italy: SCITEPRESS - Science and Technology Publications","DOI":"10.5220\/0012135600003555"},{"key":"67_CR40","doi-asserted-by":"publisher","unstructured":"Li W, Manickam S, Chong YW, Leng W, Nanda P (2024) A State-of-the-Art Review on Phishing Website Detection Techniques. IEEE Access. 12:187976\u2013188012. https:\/\/doi.org\/10.1109\/ACCESS.2024.3514972","DOI":"10.1109\/ACCESS.2024.3514972"},{"key":"67_CR41","doi-asserted-by":"publisher","unstructured":"Li W, Manickam S, Laghari SUA, Chong YW (2023) Uncovering the Cloak: A Systematic Review of Techniques Used to Conceal Phishing Websites. IEEE Access. 11:71925\u201371939. https:\/\/doi.org\/10.1109\/ACCESS.2023.3293063","DOI":"10.1109\/ACCESS.2023.3293063"},{"key":"67_CR42","doi-asserted-by":"crossref","unstructured":"Lu H, Wu Y, Li S, Lin Y, Zhang C, Zhang F (2021) BADUSB-C: Revisiting BadUSB with Type-C. In: 2021 IEEE Security and Privacy Workshops (SPW). p 327\u2013338","DOI":"10.1109\/SPW53761.2021.00053"},{"key":"67_CR43","doi-asserted-by":"publisher","unstructured":"Marshall N, Sturman D, Auton JC (2024) Exploring the evidence for email phishing training: A scoping review. Comput Secur. 139:103695. https:\/\/doi.org\/10.1016\/j.cose.2023.103695","DOI":"10.1016\/j.cose.2023.103695"},{"issue":"1","key":"67_CR44","doi-asserted-by":"publisher","first-page":"4697494","DOI":"10.1155\/2022\/4697494","volume":"2022","author":"N Mohamed","year":"2022","unstructured":"Mohamed N, Almazrouei SK, Oubelaid A, Elsisi M, ElHalawany BM, Ghoneim SS (2022) Air-Gapped Networks: Exfiltration without Privilege Escalation for Military and Police Units. Wireless Commun Mobile Comput 2022(1):4697494. https:\/\/doi.org\/10.1155\/2022\/4697494","journal-title":"Wireless Commun Mobile Comput"},{"key":"67_CR45","doi-asserted-by":"publisher","unstructured":"Naqvi B, Perova K, Farooq A, Makhdoom I, Oyedeji S, Porras J (2023) Mitigation strategies against the phishing attacks: A systematic literature review. Comput Secur. 2023 Sep 132:103387. https:\/\/doi.org\/10.1016\/j.cose.2023.103387","DOI":"10.1016\/j.cose.2023.103387"},{"key":"67_CR46","doi-asserted-by":"crossref","unstructured":"Nicho M, Sabry I (2023) Bypassing Multiple Security Layers Using Malicious USB Human Interface Device. In: Proceedings of the 9th International Conference on Information Systems Security and Privacy Lisbon, Portugal: INSTICC. p 501\u2013508","DOI":"10.5220\/0011677100003405"},{"key":"67_CR47","doi-asserted-by":"publisher","first-page":"675","DOI":"10.1016\/j.cose.2017.08.002","volume":"70","author":"N Nissim","year":"2017","unstructured":"Nissim N, Yahalom R, Elovici Y (2017) USB-based attacks. Computers & Security. 70:675\u2013688. https:\/\/doi.org\/10.1016\/j.cose.2017.08.002","journal-title":"Computers & Security."},{"key":"67_CR48","unstructured":"Nohl K, Lell J (2014) BadUSB - On Accessories that Turn Evil. Presented at Black Hat, Available: https:\/\/www.blackhat.com\/us-14\/briefings.html#badusb-on-accessories-that-turn-evil"},{"issue":"1","key":"67_CR49","doi-asserted-by":"publisher","first-page":"19","DOI":"10.3390\/jsan10010019","volume":"10","author":"J Oliveira","year":"2021","unstructured":"Oliveira J, Pinto P, Santos H (2021) Distributed Architecture to Enhance Systems Protection against Unauthorized Activity via USB Devices. J Sens Actuator Netw. 10(1):19. https:\/\/doi.org\/10.3390\/jsan10010019","journal-title":"J Sens Actuator Netw."},{"key":"67_CR50","doi-asserted-by":"crossref","unstructured":"Pathmanaban Y, Thiagarajan M, Palaniappan H (2025) USB-Sentinel: A Generalized AIO Software-Assisted Insider Threat Detection Framework. In: Das N, Khan AK, Mandal S, Krejcar O, Bhattacharjee D, editors. Proceedings of International Conference on Data, Electronics and Computing Singapore: Springer Nature Singapore. p 401\u2013421","DOI":"10.1007\/978-981-97-8476-9_29"},{"key":"67_CR51","unstructured":"Prolific (2023) Quickly find research participants you can trust. https:\/\/www.prolific.com\/"},{"key":"67_CR52","unstructured":"Proofpoint (2023) 2023 State of the Phish. Available: https:\/\/www.proofpoint.com\/sites\/default\/files\/threat-reports\/pfpt-us-tr-state-of-the-phish-2023.pdf"},{"key":"67_CR53","doi-asserted-by":"crossref","unstructured":"Quinkert F, Degeling M, Holz T (2021) Spotlight on Phishing: A Longitudinal Study on Phishing Awareness Trainings. In: Bilge L, Cavallaro L, Pellegrino G, Neves N, editors. Detection of Intrusions and Malware, and Vulnerability Assessment Cham: Springer International Publishing. p 341\u2013360","DOI":"10.1007\/978-3-030-80825-9_17"},{"issue":"1","key":"67_CR54","doi-asserted-by":"publisher","first-page":"248","DOI":"10.1007\/s12528-023-09392-z","volume":"37","author":"V Rikkers","year":"2025","unstructured":"Rikkers V, Sarmah DK (2025) A story-driven gamified education on USB-based attack. J Comput Higher Educ. 37(1):248\u2013272. https:\/\/doi.org\/10.1007\/s12528-023-09392-z","journal-title":"J Comput Higher Educ."},{"key":"67_CR55","doi-asserted-by":"publisher","unstructured":"Rizzoni F, Magalini S, Casaroli A, Mari P, Dixon M, Coventry L (2022) Phishing simulation exercise in a large hospital: A case study. DIGITAL HEALTH. 8:20552076221081716. https:\/\/doi.org\/10.1177\/20552076221081716","DOI":"10.1177\/20552076221081716"},{"key":"67_CR56","doi-asserted-by":"publisher","unstructured":"Singh K, Aggarwal P, Rajivan P, Gonzalez C (2023) Cognitive elements of learning and discriminability in anti-phishing training. Comput Secur. 127:103105. https:\/\/doi.org\/10.1016\/j.cose.2023.103105","DOI":"10.1016\/j.cose.2023.103105"},{"key":"67_CR57","unstructured":"Solutions CE (2024) cherry-embedded\/CherryUSB. https:\/\/github.com\/cherry-embedded\/CherryUSB. GitHub repository"},{"key":"67_CR58","doi-asserted-by":"crossref","unstructured":"Spolaor R, Liu H, Turrin F, Conti M, Cheng X (2023) Plug and Power: Fingerprinting USB Powered Peripherals via Power Side-channel. In: IEEE INFOCOM 2023 - IEEE Conference on Computer Communications. p 1\u201310","DOI":"10.1109\/INFOCOM53939.2023.10229048"},{"key":"67_CR59","unstructured":"Straits Research (2024) USB Device Market Size, Trends, Growth, Demand, Outlook to 2031. Accessed: 07 Apr, 2024. [Online]. Available: https:\/\/straitsresearch.com\/report\/usb-devices-market"},{"key":"67_CR60","unstructured":"Su Y, Genkin D, Ranasinghe D, Yarom Y (2017) USB Snooping Made Easy: Crosstalk Leakage Attacks on USB Hubs. In: 26th USENIX Security Symposium (USENIX Security 17) Vancouver, BC: USENIX Association. p 1145\u20131161. https:\/\/www.usenix.org\/conference\/usenixsecurity17\/technical-sessions\/presentation\/su"},{"key":"67_CR61","doi-asserted-by":"publisher","unstructured":"Sumner A, Yuan X, Anwar M, McBride M (2022) Examining factors impacting the effectiveness of anti-phishing trainings. J Comput Inf Syst. 62(5):975\u2013997. https:\/\/doi.org\/10.1080\/08874417.2021.1955638","DOI":"10.1080\/08874417.2021.1955638"},{"key":"67_CR62","doi-asserted-by":"publisher","unstructured":"Sutter T, Bozkir AS, Gehring B, Berlich P (2022) Avoiding the Hook: Influential Factors of Phishing Awareness Training on Click-Rates and a Data-Driven Approach to Predict Email Difficulty Perception. IEEE Access. 10:100540\u2013100565. https:\/\/doi.org\/10.1109\/ACCESS.2022.3207272","DOI":"10.1109\/ACCESS.2022.3207272"},{"key":"67_CR63","doi-asserted-by":"crossref","unstructured":"Suzaki K, Hori Y, Kobara K, Mannan M (2019) DeviceVeil: Robust Authentication for Individual USB Devices Using Physical Unclonable Functions. In: 2019 49th Annual IEEE\/IFIP International Conference on Dependable Systems and Networks (DSN). p 302\u2013314","DOI":"10.1109\/DSN.2019.00041"},{"issue":"4","key":"67_CR64","doi-asserted-by":"publisher","first-page":"44","DOI":"10.1109\/MTS.2010.939228","volume":"29","author":"A Tetmeyer","year":"2010","unstructured":"Tetmeyer A, Saiedian H (2010) Security Threats and Mitigating Risk for USB Devices. IEEE Technol Soc Magaz. 29(4):44\u201349. https:\/\/doi.org\/10.1109\/MTS.2010.939228","journal-title":"IEEE Technol Soc Magaz."},{"key":"67_CR65","doi-asserted-by":"crossref","unstructured":"Tian DJ, Bates A, Butler K (2015) Defending Against Malicious USB Firmware with GoodUSB. In: Proceedings of the 31st Annual Computer Security Applications Conference ACSAC \u201915, New York, NY, USA: Association for Computing Machinery. p 261\u2013270","DOI":"10.1145\/2818000.2818040"},{"key":"67_CR66","doi-asserted-by":"crossref","unstructured":"Tian J, Scaife N, Kumar D, Bailey M, Bates A, Butler K (2018) SoK: \"Plug & Pray\" Today \u2013 Understanding USB Insecurity in Versions 1 Through C. In: 2018 IEEE Symposium on Security and Privacy (SP). p 1032\u20131047","DOI":"10.1109\/SP.2018.00037"},{"key":"67_CR67","doi-asserted-by":"crossref","unstructured":"Tischer M, Durumeric Z, Foster S, Duan S, Mori A, Bursztein E, et\u00a0al (2016) Users Really Do Plug in USB Drives They Find. In: 2016 IEEE Symposium on Security and Privacy (SP). p 306\u2013319","DOI":"10.1109\/SP.2016.26"},{"key":"67_CR68","doi-asserted-by":"crossref","unstructured":"Wang Z, Stavrou A (2010) Exploiting smart-phone USB connectivity for fun and profit. In: Proceedings of the 26th Annual Computer Security Applications Conference ACSAC \u201910, New York, NY, USA: Association for Computing Machinery. p 357\u2013366","DOI":"10.1145\/1920261.1920314"},{"key":"67_CR69","first-page":"101","volume-title":"Advances in Security","author":"J Williams","year":"2021","unstructured":"Williams J, King J, Smith B, Pouriyeh S, Shahriar H, Li L (2021) Phishing Prevention Using Defense in Depth. In: Daimi K, Arabnia HR, Deligiannidis L, Hwang MS, Tinetti FG (eds) Advances in Security. Springer International Publishing, Networks, and Internet of Things Cham, pp 101\u2013116"},{"key":"67_CR70","doi-asserted-by":"publisher","unstructured":"Yeoh W, Huang H, Lee WS, Al\u00a0Jafari F, Mansson R (2021) Simulated Phishing Attack and Embedded Training Campaign. J Comput Inf Syst. 2021 Aug 62(4):802\u2013821. https:\/\/doi.org\/10.1080\/08874417.2021.1919941","DOI":"10.1080\/08874417.2021.1919941"},{"issue":"5","key":"67_CR71","doi-asserted-by":"publisher","first-page":"8","DOI":"10.1109\/MSEC.2020.2994827","volume":"18","author":"L Zhao","year":"2020","unstructured":"Zhao L, Lie D (2020) Is Hardware More Secure Than Software? IEEE Secur Privacy. 18(5):8\u201317. https:\/\/doi.org\/10.1109\/MSEC.2020.2994827","journal-title":"IEEE Secur Privacy."},{"key":"67_CR72","doi-asserted-by":"publisher","first-page":"777","DOI":"10.1007\/978-3-030-33506-9_71","volume-title":"Advances on Broad-Band Wireless Computing","author":"S Zhao","year":"2020","unstructured":"Zhao S, Wang XA (2020) A Survey of Malicious HID Devices. In: Barolli L, Hellinckx P, Enokido T (eds) Advances on Broad-Band Wireless Computing. Springer International Publishing, Communication and Applications Cham, pp 777\u2013786"}],"container-title":["Journal of King Saud University Computer and Information Sciences"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s44443-025-00067-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s44443-025-00067-6\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s44443-025-00067-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,7]],"date-time":"2025-09-07T00:19:47Z","timestamp":1757204387000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s44443-025-00067-6"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,7]]},"references-count":72,"journal-issue":{"issue":"5","published-print":{"date-parts":[[2025,7]]}},"alternative-id":["67"],"URL":"https:\/\/doi.org\/10.1007\/s44443-025-00067-6","relation":{},"ISSN":["1319-1578","2213-1248"],"issn-type":[{"value":"1319-1578","type":"print"},{"value":"2213-1248","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,7]]},"assertion":[{"value":"30 January 2025","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"19 May 2025","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"1 July 2025","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare that they have no known competing financial interests or personal relationships that could have appeared to influence the work reported in this paper.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing Interest"}}],"article-number":"91"}}