IMPROVING THE RELIABILITY OF PHISHING SIMULATION RESULTS THROUGH BOT FILTERING

Abstract

Phishing simulations are an essential instrument for improving employee awareness and skills in cybersecurity, particularly in the face of escalating cyber threats, such as financial fraud and data breaches. These simulations enable organizations to evaluate the effectiveness of their training programs and measure employee readiness to detect and respond to phishing attempts. However, the reliability of phishing simulation results is often compromised by automated clicks generated by bots, which are part of corporate email security systems. This study aims to address these distortions by developing an effective bot filtering algorithm to ensure that simulation data accurately reflects human behavior. Methodology. The study proposes an algorithm for filtering automated interactions in phishing attack simulations and analyzes its effectiveness. The algorithm is based on the empirical determination of time intervals between the opening of an email and clicking on a link, allowing for the identification of bot clicks and their differentiation from real user actions. The proposed approach has been experimentally validated using corporate data, enabling the assessment of its accuracy and reliability. The implementation of this algorithm enhances the analysis of phishing simulation results, improves the reliability of user behavior assessment, and increases the effectiveness of cybersecurity training programs. Scientific novelty. The study presents a novel approach to filtering bot interactions in phishing simulations by introducing experimentally validated criteria. The proposed algorithm is based on rapid-response patterns observed in bot activity, allowing organizations to exclude such interactions and focus on genuine user behavior. This innovation significantly enhances the reliability of phishing simulation results. Conclusions. The implementation of the bot filtering algorithm reduces distortions in phishing simulation data, enabling a more accurate assessment of employee readiness and improving the effectiveness of training programs. This approach not only enhances organizational cybersecurity but also fosters a culture of vigilance and continuous learning to counter evolving cyber threats.