PDF http://www.deas.harvard.edu/~rachna/papers/why_phishing_works.pdf
Rachna Dhamija ;J.D. Tygar; Marti Hearst
"Looks at today's standard security indicators used with websites. The report also references previous larger studies on phishing by other researchers."