Cognition Orientation Risk Evaluation—A Personality Driven Integrated Model for Phishing Susceptibility

Phishing attacks exploit human vulnerabilities through social engineering techniques; therefore, a multidimensional framework integrating personality and cognition is crucial for tailoring personalized defenses against phishing threats. To prevent phishing attacks, focusing on psychological mechanisms has become the primary approach to address the human-centric nature of these threats. In response, we propose an integrated framework that synthesizes dimensions from the Five-Factor Model (FFM) and the Myers–Briggs Type Indicator (MBTI), grounded in Dual Process Theory to explore the cognitive drivers underlying decision-making under threat. To operationalize this framework, we developed a decision tree classifier to quantify the predictive significance of various personality traits and their hierarchical interactions. The results indicate that the personality types associated with the highest phishing risk profiles are ENFP, ESFP, ESTP, and ENFJ. These hierarchical classification results are projected onto the C.O.R.E. Quadrant (Cognition Orientation Risk Evaluation Quadrant) which enables the systematic representation of risk patterns across all 16 personality types. By providing a structured visualization of personality-driven risk patterns, the C.O.R.E. Quadrant offers a practical foundation for developing personalized defense mechanisms and tailored cybersecurity training strategies, moving beyond one-size-fits-all security protocols.