Systems and methods for AIDA based role models
The present disclosure describes systems and methods for using a model for a predetermined role for simulated phishing campaigns. A campaign controller communicates simulated phishing communications to one or more devices of a user using a model that the campaign controller selects from a plurality of models in a database that have been established for predetermined roles of a company. The model is selected based on one or more attributes of the user that are identified by the campaign controller. The campaign controller identifies one or more attributes of each user of a plurality of users for the simulated phishing campaign, and the campaign controller selects a respective model for each user based on the attributes of each user, wherein the models are not all the same for all of the users.
1. A method for using a model of a predetermined role for a simulated phishing campaign, the method comprising:
(a) establishing in a database a plurality of models for communicating via a simulated phishing campaign, wherein each model of the plurality of models is established for a predetermined role of a plurality of predetermined roles of a company;
(b) identifying, by a campaign controller, one or more attributes of a user;
(c) selecting, by a campaign controller based at least on the one or more attributes independent of any user selecting a model, the model for the predetermined role from the plurality of models of predetermined roles for a simulated phishing communication to be communicated to one or more devices of the user, wherein each of the plurality of models is an artificial intelligence model configured to take as input information related to a simulated phishing campaign and provides as output information for performing a next action for the simulated phishing campaign; and
(d) communicating, by the campaign controller, to the one or more devices of the user the simulated phishing communication responsive to output information provided by the selected model for the predetermined role.
2. The method of claim 1 , wherein each model of the plurality of models provides the predetermined role of one of the following: an executive, a researcher, a human resources staff, an information technology staff and a chief security officer.
3. The method of claim 1 , wherein the model is trained using a plurality of question and answer pairs established for the predetermined role.
4. The method of claim 1 , wherein each model of the plurality of models provides the predetermined role corresponding to one of an industry, a demographic or a user's organizational level in a company.
5. The method of claim 4 , wherein the campaign controller uses the model to provide content of simulated phishing communications corresponding to one of the industry, the demographic or the user's organizational level in the company.
6. The method of claim 1 , wherein the simulated phishing communication comprises one of the following: an email, a text or short message service (SMS) message, a phone call or an Internet based communication.
7. The method of claim 1 , wherein (c) further comprises selecting the model based at least on a template selected by the campaign controller for the user.
8. The method of claim 7 , further comprising selecting the template based on at least the one or more attributes of the user.
9. The method of claim 1 , wherein (d) further comprises determining, by the campaign controller, a second simulated phishing communication to communicate to the user based on at least the model and communicating the second simulated phishing communication to the one or more devices of the user.
10. The method of claim 1 , wherein (b) further comprises selecting a second model from the plurality of models for one or more simulated phishing communications to be communicated to the one or more devices of a second user, wherein the second model comprises a second predetermined role different from the first predetermined role.
11. The method of claim 10 , further comprising selecting the second model based at least on one or more attributes of the second user, the one or more attributes of the second user and different from the one or more attributes of the user.
12. The method of claim 10 , further comprising communicating, by the campaign controller, to one or more devices of the second user, one or more simulated phishing communications based at least on the second predetermined role of the selected second model, the one or more simulated phishing communications comprising content constructed in accordance with the selected second model and different from content of the simulated phishing communication communicated to the one or more devices of the user.
13. The method of claim 1 , further comprising identifying, by the campaign controller, one or more attributes of each user of a plurality of users for the simulated phishing campaign.
14. The method of claim 13 , further comprising selecting, by the campaign controller, a respective model for each user of the plurality of users based on at least the one or more attributes of each user, wherein the model selected for the user is different from a second model selected for a second user of the plurality of users.
15. The method of claim 14 , further comprising communicating, by the campaign controller, to a respective one or more devices of each user of the plurality of users one or more simulated phishing communications based on the respective model selected for each user.
16. A system for using a model of a predetermined role for a simulated phishing campaign, the system comprising:
a processor, coupled to memory;
a database configured to store a plurality of models for communicating via a simulated phishing campaign, wherein each model of the plurality of models is established for a predetermined role of a plurality of predetermined roles of a company;
a campaign controller executable on the processor, coupled to memory, and configured to:
identify one or more attributes of a user;
select, based at least on the one on or more attributes independent of any user selecting a model, the model for the predetermined role from the plurality of models of predetermined roles for a simulated phishing communication to be communicated to one or more devices of the user; and
communicate the one or more devices of the user the simulated phishing communication responsive to output information provided by the selected model for the predetermined role;
wherein each of the plurality of models is an artificial intelligence model configured to take as input information related to a simulated phishing campaign and provides as output information for performing a next action for the simulated phishing campaign.
17. The system of claim 16 , wherein each model of the plurality of models provides the predetermined role one of the following: an executive, a researcher, a human resources staff, an information technology staff and a chief security officer.
18. The system of claim 16 , wherein the model is trained using a plurality of question and answer pairs established for the predetermined role.
19. The system of claim 16 , wherein each model of the plurality of models provides the predetermined role corresponding to one of an industry, a demographic or a user's organizational level in a company.
20. The system of claim 19 , wherein the campaign controller is further configured to use the model to provide content of simulated phishing communications corresponding to one of the industry, the demographic or the user's organizational level in the company.
21. The system of claim 16 , wherein the simulated phishing communication comprises one of the following: an email, a text or short message service (SMS) message, a phone call or an Internet based communication.
22. The system of claim 16 , wherein the campaign controller is further configured to select the model based at least on a template selected by the campaign controller for the user.
23. The system of claim 22 , wherein the campaign controller is further configured to select the template based on at least the one or more attributes of the user.
24. The system of claim 16 , wherein the campaign controller is further configured to determine a second simulated phishing communication to communicate to the user based on at least the model and communicating the second simulated phishing communication to the one or more devices of the user.
25. The system of claim 16 , wherein the campaign controller is further configured to select a second model from the plurality of models for one or more simulated phishing communications to be communicated to the one or more devices of a second user, wherein the second model comprises a second predetermined role different from the first predetermined role.
26. The system of claim 25 , wherein the campaign controller is further configured to select the second model based at least on one or more attributes of the second user, the one or more attributes of the second user different from the one or more attributes of the user.
27. The system of claim 25 , wherein the campaign controller is further configured to communicate to one or more devices of the second user, one or more simulated phishing communications based at least on the second predetermined role of the selected second model, the one or more simulated phishing communications comprising content constructed in accordance with the second selected model and different from content of the simulated phishing communication communicated to the one or more devices of the user.
28. The system of claim 16 , wherein the campaign controller is further configured to identify one or more attributes of each user of a plurality of users for the simulated phishing campaign.
29. The system of claim 28 , wherein the campaign controller is further configured to select, a respective model from the plurality of models for each user of the plurality of users based on at least the one or more attributes of each user, wherein the model selected for the user is different from a second model selected for a second user of the plurality of users.
30. The system of claim 29 , wherein the campaign controller is further configured to communicate to a respective one or more devices of each user of the plurality of users one or more simulated phishing communications based on the respective model selected for each user.