大学生智能手机用户信息安全意识与行为调查分析

Investigation and Analysis of Information Security Consciousness and Behavior of Smartphone Users in University Students

[目的／意义]通过了解大学生信息安全知识、信息安全意识及行为的状况，发现其中存在问题，并提出应对措施。[方法／过程]采取问卷调查的形式，以天津工业大学学生智能手机用户作为调查对象，从用户个人基本信息、使用智能手机信息安全意识状况、智能手机用户信息安全行为状况、智能手机用户信息安全知识掌握情况、用户信息安全知识的来源以及对知识的需求程度5个方面进行调查。[结果／结论]调查结果显示：大学生智能手机用户对常识类信息安全知识掌握程度较专业类知识好；大学生信息安全意识相对薄弱，男生信息安全意识高于女生；大学生使用应用程序行为存在很大隐患，信息保护行为有待加强；信息安全知识是信息安全意识的前提，信息安全意识通过行为表现，但信息安全意识不一定转化为实际行为。性别与信息安全意识、信息安全行为存在显著性差异，与信息安全知识差异性不显著。根据调查现状，提出培养学生识别信息安全威胁、规避信息安全风险的能力、提高学生基本的信息安全防护能力、加强学生信息安全道德伦理和法律法规教育等建议。

[Purpose/significance] This article aims to understand the information security knowledge, information security awareness and behavior of undergraduates, to find the existing relationships and problems, and to propose countermeasures. [ Method/process] Through questionnaire survey, the smart phone users in Tianjin Polytechnic University students are investigated from five areas of the basic personal information of users, the use of smart phone information security awareness, smart phone user information security behavior, smart phone user information security knowledge, the source of user information security knowledge and the degree of knowledge needs. [ Result/conclusion ] The investigation and analysis show that college students smartphone users have better knowledge of common-sense information security than professional ones,the awareness of information security is relatively weak, and the awareness of boys is higher than that of girls. There is a great hidden danger in information security and information protection should be strengthened. Information security knowledge is the premise of information security awareness, and information security awareness is expressed through behavior, but awareness of information security does not necessarily translate into practical behavior. There is a significant difference between gender and information security awareness as well as information security behavior, but there is no significant difference with information security knowledge. Fi- nally, according to the status quo of the investigation, this paper puts forward three suggestions ： cultivating students＇ ability of identifying information security threat, avoiding information security risk, improving students＇ basic ability of information security protection, and strengthening students＇ ethics of information security and education of laws and regulations.