Attitudes to IT security when using a smartphone

While mobile devices are becoming more and more powerful, the number of potential security threats is increasing. Although the important role of users in the realization of IT security measures is widely acknowledged and documented, research in the area of mobile security mostly concentrates on technical means. In this work we take the first step in examining the role of the users in the IT security of mobile devices. We present mental models of security that are based on the results of interviews with 24 users. Mental models are the representation of reality in people's mind and can be inaccurate or faulty. Mental models are very helpful for behavior prediction. Thus, mental models of security form the basis of users' efforts to protect their devices.