Why and how to perform fraud experiments
Fraud isn't new, but in the eyes of many experts, phishing and crimeware threaten to topple society's overall stability because they erode trust in its underlying computational infrastructure. Most people agree that phishing and crimeware must be fought, but to do so effectively, we must fully understand both types of threat; that starts by quantifying how and when people fall for deceit. In this article, we look closer at how to perform fraud experiments. Researchers typically use three approaches to quantify fraud: surveys, in-lab experiments, and naturalistic experiments.
Jakobsson, M. ; Finn, P.; Johnson, N. Why and how to perform fraud experiments. IEEE Security & Privacy Magazine. 2008 March-April; 6 (2): 66-68.