Phishing Training Made Fun

Inspiration

Phishing is quite a boring topic to learn about, especially for non-technical people, but it's one of the most vulnerable aspects of an organization's security. That's why we decided to come up with an entertaining version of the training.

What it does

This app will give the users phishing emails and the user must identify whether the email is legit, if it's a phishing email, they must identify what apsects of it are suspicous. They will be awarded points for how well they do and the next question will be based off of the weaknesses they display.

How we built it

We used machine learning on a database containing spam emails and identified the most common words used. With that information, we used AI to generate a new database. Then we we built a full stack app with our AI analysis of user weaknesses happening in the backend.

Challenges we ran into

The biggest challenge we ran into was trying to get a production level app, it was quite a bit of research to get that jump from local code files to something tangible.

Accomplishments that we're proud of

Everyone on this team is a cybersecurity major, so we have coding experience, but to an extent. We're proud of being able to actually deploy an app and have something to actual use.

What we learned

We learnt a lot of things on the journey, but the most interesting one was how to go from have couple code files on your environment to actually deploying a web app.

What's next for Phishing Training Made Fun

Our next step is to add additional forms of phishing, like vishing. It would be a lot more beneficial for receptionists or front-desk workers as they handle a lot of phone calls.

Built With

• gemini-api
• html
• javascript
• node.js
• python
• react