Phishing Awareness and Cybersecurity Practices among Undergraduates in Nigeria (Project Guide)

By EngrHenryTech Publishing · Computer Science

PHISHING AWARENESS AND CYBERSECURITY PRACTICES AMONG UNDERGRADUATES IN NIGERIA: A COMPLETE PROJECT GUIDE

Departments: Computer Science, Cyber Security, Information Technology, Information Systems, Library and Information Science, Mass Communication

ABOUT THIS GUIDE

This is a detailed research guide and framework, not a finished project for submission. It gives you a ready-to-adapt Chapter One, a map for your literature review, a full survey methodology plan with a worked sample-size calculation, a draft questionnaire with a scored phishing recognition test, empty results tables, and guidance for writing your conclusions. You collect your own data and write Chapters Four and Five from your own findings.

SECTION 1: TOPIC AND ALTERNATIVE TITLES

Main topic:
Phishing Awareness and Cybersecurity Practices among Undergraduates of [University]

Alternative titles:
1. Undergraduates' Ability to Recognise Phishing Messages: A Study of [University].
2. Password Practices and Account Security among Students in [Institution].
3. Cybersecurity Awareness and Victimisation of Students by Online Fraud.
4. Effect of a Cybersecurity Awareness Session on Students' Phishing Detection (an experimental version).
5. Social Engineering Attacks through WhatsApp and SMS: Awareness among Young People in [City].
6. Information Security Awareness among Staff of [Organisation or Bank].

SECTION 2: MODEL CHAPTER ONE

1.1 Background to the Study (model text, rewrite in your own words)

Phishing is a form of social engineering in which attackers pretend to be trusted organisations or people, in order to trick victims into revealing passwords, bank details or one-time passwords (OTPs), sending money, or installing malicious software. Phishing messages arrive by email, SMS ("smishing"), voice calls ("vishing"), social media and messaging apps such as WhatsApp. Common examples in Nigeria include fake bank alerts, messages claiming that a BVN or account will be blocked, fake job and scholarship offers, fake giveaways, and messages from hacked friends' accounts asking for money.

Technical defences, such as spam filters, cannot stop every phishing message, so the awareness and behaviour of users remain critical. Studies of phishing have found that people often fail to notice warning signs, such as mismatched web addresses, urgent language and requests for secret information (Dhamija, Tygar and Hearst, 2006). Undergraduates are heavy users of smartphones, social media, mobile banking and online services, which makes them frequent targets. Many also manage accounts that are important to them, such as school portals, email and bank accounts.

Nigeria's Cybercrimes (Prohibition, Prevention, etc.) Act 2015, as amended in 2024, criminalises many forms of online fraud, but prevention depends greatly on users' ability to recognise attacks and on practices such as using strong, unique passwords and enabling two-factor authentication. This study therefore examines phishing awareness and cybersecurity practices among undergraduates of [university].

1.2 Statement of the Problem (model)

Many students in [university] report that they or their friends have received fake messages, had social media accounts hacked, or lost money to online fraud [support this with a short pilot survey, campus security reports or published data]. It is not clear how well students can actually recognise phishing messages, what security practices they follow, or whether awareness is related to their practices and experience of attacks. This study addresses that problem.

1.3 Objectives of the Study

The main objective is to examine phishing awareness and cybersecurity practices among undergraduates of [university]. The specific objectives are to:
1. determine students' level of awareness of phishing;
2. measure students' ability to recognise phishing messages;
3. identify students' cybersecurity practices (passwords, two-factor authentication, updates);
4. examine the relationship between awareness and cybersecurity practices;
5. determine the extent to which students have experienced phishing attacks.

WHAT THE FULL GUIDE CONTAINS

The complete guide continues with:
- research questions and null hypotheses matched to each objective;
- significance, scope, limitations and definitions of terms;
- a Chapter Two map: concepts to define, the theoretical framework, how to build the empirical review, and a model statement of the research gap;
- a full Chapter Three plan: design, population, a worked sample-size calculation, sampling technique, validity, reliability and the statistical test for each hypothesis;
- a ready-to-adapt draft questionnaire (or data collection instrument);
- Chapter Four table templates with guidance on interpreting and discussing results;
- a Chapter Five guide to the summary, conclusion and recommendations;
- a list of real starting references, plus a checklist of common supervisor corrections.

Please note: this is a research guide and framework to help you plan and write your own project. It does not contain invented data or results. You collect your own data and write Chapters Four and Five from your own findings.