4th Industrial Revolution provides many advantages all over the world by increasing efficiency, productivity and customisation. Cybersecurity becomes one of the biggest challenges in this era, because information becomes an expensive asset dealing with huge data volumes, improving communication with digital environment. Digital devices and information systems increasingly become attractive for cyber-attacks. Eurostat states, that „...in 2019, approximately 1 in 3 EU citizens aged 16 to 74 reported security-related incidents when using the internet for private purposes in 2019 in the last 12 months. During this period phishing was the most frequent security incident reported in 2019.“ This shows that usage of hardware and software security solutions alone are not very effective fighting with those threats, because no system or security software can guarantee 100% protection from phishing attacks. Phishing is one of the highest problems because cybercriminals use faster and innovative technological tools to carry out phishing campaigns. According to the Europol’s annual presentation (2019) “…new threats continue to emerge from vulnerabilities in established processes and technologies. Moreover, the longevity of cyber threats is clear, as many long-standing and established modi operandi persist, despite our best efforts.” Therefore human-driven phishing defence system that leverages human instinct for detection and technology to scale response should be developed and freely available for wide audience. To create human-driven phishing defence, education is required for the user to become capable of identifying and responding to phishing attacks in the correct manner. Introduced CyberPhish project addresses the education and labour market requirements for cybersecurity/phishing skills and knowledge for students and graduates in university (including life-long learning activities). The overall project objectives are to analyse, design, develop and implement an up-to-date curriculum, e-learning materials, blended learning environment, knowledge and skills self-evaluation and knowledge evaluation system simulations for students and other users in order to prevent from phishing attacks, raise competencies in this area for identification and prevention of threats. It will address the need for awareness and education in phishing attack prevention. The developed e-learning materials, blended learning environment and simulations will be integrated in curricula at the participating Universities as well as provide the opportunity for increased dissemination of knowledge to EU-Citizens through Open Access. The main intellectual outputs are related to cybersecurity and future competencies and they will include: 1. Study analysis and recommendations: Avoiding phishing attacks and improving critical thinking 2. Course Curriculum and localisation 3. Online learning material 4. Simulations for education (gamification) 5. Self-evaluation knowledge evaluation system 6. Methodological guidelines for trainers and for implementation of DigitalPhish module The main beneficiaries which will be impacted by the project are students at HEIs. Educators, university staff, education centres, business sector (employers and employees) will also have benefit by improving their knowledge and competencies. CyberPhish project impact will be on project partners; HEIs and secondary; adult education centres. As the result of CyberPhish project schools, HEI and other training organisations will be able to improve their cybersecurity knowledge by using the outcomes of the project. The project partners were selected according to their experience in cybersecurity. CyberPhish project coordinator is Vilnius university (Lithuania) and 5 partners: • Macdac Engineering Consultancy Bureau LTD - MECB (Malta) • Dorea Educational Institute WTF (Cyprus) • Public institution "Information Technologies Institute" (Lithuania) • Tartu Ulikool (Estonia) • Altacom, SIA (Latvia) All learning products will be tested by and improved after analysis of pilot studies/training and testing in Lithuania, Malta, Estonia, Cyprus and Latvia. At least 100 trainees will be invited to the pilot. All learning products will be presented to national higher education institutions, and encouraged to be used in CyberPhish curricula. Guidelines will support their implementation. EN versions will be used for dissemination in other European countries for expanded further localization base.
The CyberPhish consortium aimed to: - develop innovative, practical tools to encourage the target group to acquire new or updated knowledge about phishing and cyber security, and to increase critical thinking in identifying phishing incidents; - develop training tools, i.e. a training course for students to acquire new or updated knowledge on phishing and cyber security, and methodological guidelines for teachers on good practice in the use of the CyberPhish course; - develop tools to use/ re-use the course both in partner organisations and in other educational organisations, so that they can integrate the course into their various study programmes; - provide access to learning resources through a distance learning environment that integrates gamification elements and tracking of learning progress; - educate higher education students, lecturers, university staff (community members), education centers and the business sector (employers and employees), and promote critical thinking on phishing and cyber security among the target group in order to reduce the threat of phishing attacks; - spread the created results for reaching a more broad impact.
Cyber security is one of the biggest challenges of the 4th Industrial Revolution. Today, people store substantial amounts of personal information on digital devices, computers and clouds using various digital technologies. Cyber criminals seek to obtain personal information with purpose to exploit it, sell it or launch cyber-attacks. According to Eurostat, around 30% of citizens (aged 16-74) who used the internet for private purposes reported security incidents in 2019 alone. This shows that hardware and software security solutions alone cannot effectively combat these threats and provide 100% protection against phishing attacks. Phishing remains as the most widely used tool for cyber-attacks (Enisa, 2021). Information is a costly asset and the main vulnerability is the human factor. People tend to trust, they unthinkingly click on obscure links, insecure files in emails or private messages on social networks. Therefore, only human vigilance and the ability to recognize the signs of phishing attacks and to react appropriately can help avoid consequences. Education and training of appropriate skills are a key defense against phishing attacks.