EDUKASI DAN SIMULASI PHISHING UNTUK MENINGKATKAN LITERASI KEAMANAN SIBER SISWA SMA SEJAHTERA 1 DEPOK
Abstract
High school students are active users of digital services, yet their ability to recognize phishing and social engineering attacks has not kept pace with that use. The partner school, SMA Sejahtera 1 Depok, did not yet have a structured, practice-based cybersecurity education program. This community service activity aimed to improve students' cybersecurity literacy and their ability to recognize and resist phishing and social engineering attacks. It was carried out as a one-day intensive workshop on 25 September 2026 for about 50 grade X students. The methods combined interactive lectures, case demonstrations, controlled simulations, role-play, and group discussions across four pillars: cybersecurity concepts, the anatomy of phishing, social engineering patterns, and account security practices. The case demonstration used a fake free food-and-drink e-voucher claim email impersonating a look-alike brand of a well-known coffee shop near the school. Evaluation used a pre-test and post-test, simulation worksheets, a phishing email simulation, and a satisfaction questionnaire. Of the 35 phishing emails delivered, 17 students (48.6%) opened the fake link and entered data into the imitation form without verification. The mean score rose from 90.67 on the pre-test (30 students) to 97.92 on the post-test (24 students), and correct identification of a safe address rose from 46.7% to 100%. These findings show that students remain vulnerable to familiar instant offers even when their knowledge is high, underlining the importance of experience-based education. All simulations were controlled, and the data entered by students were used only to count responses and were not published.
References
Z. Alkhalil, C. Hewage, L. Nawaf, and I. Khan, “Phishing attacks: A recent comprehensive study and a new anatomy,” Front. Comput. Sci., vol. 3, Art. no. 563060, 2021, doi: 10.3389/fcomp.2021.563060.
F. Salahdine and N. Kaabouch, “Social engineering attacks: A survey,” Future Internet, vol. 11, no. 4, Art. no. 89, 2019, doi: 10.3390/fi11040089.
C. Hadnagy, Social Engineering: The Science of Human Hacking, 2nd ed. Indianapolis, IN, USA: Wiley, 2018.
K. D. Mitnick and W. L. Simon, The Art of Deception: Controlling the Human Element of Security. Indianapolis, IN, USA: Wiley, 2002.
S. Sheng, M. Holbrook, P. Kumaraguru, L. F. Cranor, and J. Downs, “Who falls for phish? A demographic analysis of phishing susceptibility and effectiveness of interventions,” in Proc. SIGCHI Conf. Human Factors Comput. Syst. (CHI ’10), Atlanta, GA, USA, 2010, pp. 373–382, doi: 10.1145/1753326.1753383.
M. Alsharnouby, F. Alaca, and S. Chiasson, “Why phishing still works: User strategies for combating phishing attacks,” Int. J. Hum.-Comput. Stud., vol. 82, pp. 69–82, 2015, doi: 10.1016/j.ijhcs.2015.05.005.
L. Hadlington, “Human factors in cybersecurity; examining the link between Internet addiction, impulsivity, attitudes towards cybersecurity, and risky cybersecurity behaviours,” Heliyon, vol. 3, no. 7, Art. no. e00346, 2017, doi: 10.1016/j.heliyon.2017.e00346.
A. A. J. Arsyad, U. Tamrin, J. P. Lande, and N. Umar, “Meningkatkan kesadaran remaja terhadap phishing melalui literasi digital: Studi kasus di SMK Darussalam Makassar,” Jurnal Pengabdian Literasi Digital Indonesia, vol. 3, no. 2, pp. 60–71, 2024, doi: 10.57119/abdimas.v3i2.122.
P. Kumaraguru, S. Sheng, A. Acquisti, L. F. Cranor, and J. Hong, “Teaching Johnny not to fall for phish,” ACM Trans. Internet Technol., vol. 10, no. 2, pp. 1–31, 2010, doi: 10.1145/1754393.1754396.
M. L. Jensen, M. Dinger, R. T. Wright, and J. B. Thatcher, “Training to mitigate phishing attacks using mindfulness techniques,” J. Manage. Inf. Syst., vol. 34, no. 2, pp. 597–626, 2017, doi: 10.1080/07421222.2017.1334499.
E. W. Tyas Darmaningrat et al., “Sosialisasi bahaya dan upaya pencegahan social engineering untuk meningkatkan kesadaran masyarakat tentang keamanan informasi,” Sewagati, vol. 6, no. 2, pp. 159–168, 2022, doi: 10.12962/j26139960.v6i2.92.
J. Maulindar and D. Hartanti, “Pelatihan perlindungan data pribadi dan keamanan siber untuk siswa SMK Negeri 2 Surakarta,” Madaniya, vol. 4, no. 4, pp. 1851–1856, 2023. [Online]. Available: https://madaniya.pustaka.my.id/journals/contents/article/view/652
M. Patria et al., “Edukasi keamanan siber sebagai upaya preventif terhadap ancaman phishing pada siswa SMA Islam Tambora Jakarta Barat,” Al Hayat: Jurnal Pengabdian Masyarakat, vol. 4, no. 1, pp. 65–74, 2026, doi: 10.62588/ahjpm.2026.v4i1.274.
A. Wijayanto et al., “Peningkatan kesadaran keamanan siber siswa SMK melalui pelatihan dan simulasi serangan dalam lingkungan virtual,” BERBAKTI: Jurnal Pengabdian kepada Masyarakat, vol. 3, no. 3, pp. 278–285, 2026, doi: 10.30822/hj4rr981.
R. B. Cialdini, Influence: The Psychology of Persuasion, rev. ed. New York, NY, USA: Harper Business, 2006.
P. A. Grassi et al., “Digital identity guidelines: Authentication and lifecycle management,” Nat. Inst. Standards Technol., Gaithersburg, MD, USA, NIST Spec. Publ. 800-63B, 2017, doi: 10.6028/NIST.SP.800-63b.
K. Parsons, D. Calic, M. Pattinson, M. Butavicius, A. McCormac, and T. Zwaans, “The Human Aspects of Information Security Questionnaire (HAIS-Q): Two further validation studies,” Comput. Secur., vol. 66, pp. 40–51, 2017, doi: 10.1016/j.cose.2017.01.004.
