Human-Centric Cybersecurity: Evaluating Phishing Susceptibility Using Behavioral Metrics

Abstract: This study explores the intersection of human behavior and cybersecurity by evaluating phishing susceptibility through behavioral metrics. Despite advancements in technical safeguards, human error remains a primary vector for cyber breaches, particularly in phishing attacks. By integrating behavioral science with empirical cybersecurity methods, this research introduces a predictive framework based on psychological and cognitive traits such as impulsivity, trust propensity, attention span, and prior exposure to security training. A structured phishing simulation involving 320 participants across varying age groups and professions was conducted to identify behavioral patterns correlated with phishing susceptibility. Regression and predictive analyses revealed significant correlations between impulsivity and phishing click-through rates, while prior security training proved a strong protective factor. Graphs and statistical models support the findings and suggest targeted interventions. The research proposes actionable frameworks for personalized training modules and awareness strategies that align with user behavior, paving the way for adaptive, human-centric cybersecurity systems. Keywords Phishing, Cybersecurity Behavior, Human Factors, Behavioral Metrics, Predictive Analysis, User Awareness