Always connected, but are smart mobile users getting more security savvy? A survey of smart mobile device users

• Published in: Behaviour & information technology 2014-12, Vol.33 (12), p.1347-1360
• Main Authors: Imgraben, James, Engelbrecht, Alewyn, Choo, Kim-Kwang Raymond
• Format: Article
• Language: English
• Subjects: Cellular telephones; Computer information security; Crime; cyber crime; Cybersecurity; Devices; Education; End users; Exact sciences and technology; Information and communication sciences; Information science. Documentation; Knowledge; Library and information science. General aspects; malware; Mobile communication systems; mobile security; Passwords; phishing; Sciences and techniques of general use; Security; Security management; security survey; smart mobile devices; Smartphones; unauthorised access; Use and user studies. Information needs; User behavior; User behaviour
• ISSN: 0144-929X; 1362-3001
• DOI: 10.1080/0144929X.2014.934286

Smart mobile devices are a potential attack vector for cyber criminal activities. Two hundred and fifty smart mobile device owners from the University of South Australia were surveyed. Not surprisingly, it was found that smart mobile device users in the survey generally underestimated the value that their collective identities have to criminals and how these can be sold. For example, participants who reported jail-breaking/rooting their devices were also more likely to exhibit risky behaviour (e.g. downloading and installing applications from unknown providers), and the participants generally had no idea of the value of their collective identities to criminals which can be sold to the highest bidder. In general, the participants did not understand the risks and may not have perceived cyber crime to be a real threat. Findings from the survey and the escalating complexities of the end-user mobile and online environment underscore the need for regular ongoing training programs for basic online security and the promotion of a culture of security among smart mobile device users. For example, targeted education and awareness programmes could be developed to inform or educate smart mobile device users and correct misconceptions or myths in order to bring about changes in attitudes and usage behaviour (e.g. not taking preventative measures such as strong passwords to protect their devices). Such initiatives would enable all end users (including senior University management who use such devices to access privileged corporate data and accounts) to maintain current knowledge of the latest cyber crime activities and the best cyber security protection measures available.