Report on Consumer Behaviors and Perceptions of Mobile Security. Presented by NQ Mobile & NCSA January 25, 2012

Transcription

1 Report on Consumer Behaviors and Perceptions of Mobile Security Presented by NQ Mobile & NCSA January 25, 2012

2 Methodology Online survey of 1,158 consumers. Participants had to own a smartphone. Respondents included 500 parents of children under the age of 18. Nineteen percent (19%) of parents have children who own a smartphone. Conducted by Fleishman-Hillard utilizing adult consumer panel from ResearchNow (formerly e-rewards). Fielded December 9 15, 2011.

3 Executive Summary Security Threats Almost three-fourths (73%) are aware of security threats to smartphones, and approximately the same number (78%) are concerned about those threats. Men tend to be more aware of the security threats and issues related to owning a smartphone, but women tend to be more concerned about threats and privacy issues. Personal Information More people are concerned about personal information than security threats. Nine out of ten (89%) are aware that smartphones contain personal information, while slightly less are concerned about it (81%). Specific Security Threats Of eight specific security threats that were evaluated, smartphone users are concerned about all eight, though in varying degrees. Most concerned: Their lost or stolen phone falling into the wrong hands and their contents being misused (78% concerned). Least concerned: Someone could remote control their smartphone camera or microphone for the purposes of monitoring them (56% concerned).

4 Executive Summary (cont.) Security Solutions More than half (58%) of smartphone users report they don t know enough about mobile security to decide whether they need it or not, and 78% of those users say they need help deciding which security solution is best for their phone, or that they don t even know where to look for security solutions. Yet three-fourths (77%) know that security features can protect their privacy. Just 7% of smartphone users were offered information about the need for security for their phone at the time of purchase. If smartphone users were interested in information about security solutions for their smartphone, most would turn to the Internet or the store/carrier where they got their phone. Seventy percent (70%) of smartphone users report they have some type of security or software on their phone, yet overall, just half (50%) of the smartphone users know what type of security or software they have.

5 Executive Summary (cont.) Security Solutions (cont.) The most common type of security for smartphones is password protection/lock command, followed by data backup. Just 8% have parental controls. Lack of Security Solutions A majority of those who do not have any security features/software on their smartphones don t have them because of a lack of awareness or complacency. If these users were to take steps to protect their phone, a majority would be interested in antivirus protection and privacy protection. Operating Systems Almost two-thirds (63%) of smartphone users are aware that they should update their phone s OS regularly. A plurality (83%) also report they have done so recently (within the past six months).

6 Executive Summary (cont.) Mobile Apps Almost nine out of ten (87%) smartphone users have downloaded apps, and a majority (60%) are aware that doing so can provide access to the private data stored on their phone. Connectivity apps and lifestyle and entertainment apps are the most popular to download. Lost/Stolen Phone Very few (4%) smartphone users have lost or had their phone stolen, and almost half (48%) did not have security features on their phone at the time. Almost half (48%) also did not take any steps after they lost or had their phone stolen. Overall, just one-third (33%) eventually retrieved their phone. It appears that there is not a connection between taking steps after a phone was lost or stolen and retrieving the phone.

7 Executive Summary (cont.) Wi-Fi A majority (57%) of smartphone users are aware that using Wi-Fi may expose the information on their phones to hackers. A strong majority (88%) of the smartphone users who were not aware, report that as a result of being informed, they would take action to reduce Wi-Fi security threats. Protecting Data Of nine specific types of data on smartphones that may be vulnerable, smartphone users are concerned about all nine, but in varying degrees. Smartphone users concerns include the following: Most concerned: Passwords (67% concerned). Least concerned: Work-related data (34% concerned). Though smartphone users are most concerned about passwords, they are most willing to add security to protect the banking and other financial data on their phone. Users are least willing to add security to protect their photos and videos.

8 Executive Summary (cont.) Location Data Users are about evenly split on being concerned about protecting the privacy of their location when using their phones. Half (50%) report that they know how to turn off or set permissions for location tracking, though just 38% know how to disable geotagging. Almost all phone users (95%) believe that at least one entity can track their location while their phone is on, though which entities can do this varies widely. A very strong majority (87%) believe that carriers can track their location when their phone is on, followed by hackers (57%) and legitimate apps (54%). One-fourth (24%) believe that data aggregators can track their location.

9 Respondent Background DETAILED FINDINGS

10 Operating System Platform Used 14% 3% 1% 2% 46% 34% iphone Android Blackberry WindowsMobile Palm Symbian* Other* Not sure * Less than 0.5% Q.2 What operating system (OS) platform does your smartphone use?

11 Smartphone Activities Make phone calls Take photos Send and receive texts Maintain list of contacts Surf the Internet Use the calendar Download and use apps Play games Access social media online Post photos Use notes and reminders features Online banking Shop online Store credit card or other financial GPS/maps/navigation Other Can exceed 100% because multiple responses were allowed 100% 93% 92% 88% 86% 81% 75% 72% 64% 61% 51% 51% 41% 33% 10% 1% 2% Q.3 What types of activities are you using your smartphone for?

12 Parent/Guardian of Child Under 18 43% 57% Yes No Q.33 Are you a parent or guardian of a child under the age of 18?

13 Gender 33% Male Female 67% Q.44 What is your gender?

14 Age 16% 1% 7% 20% 18% 21% Prefer not to say 18% Q.45 What is your age?

15 Education 30% 24% 20% * Less than 0.5% 10% 5% 5% 6% 1% Have not graduated high school Graduated high school Technical or vocational school Some college (no degree) Currently a college student Graduated college Attended graduate school (no degree) Graduate degree or higher Prefer not to say Q.46 What is the highest level of education you have reached?

16 Income 9% 3% 6% 13% 14% 32% Less than $25,000 $25,000-$49,999 $50,000-$74,999 $75,000-$99,999 $100,000-$149,000 $150,000 or more Prefer not to say 23% Q.47 What is your total household income before taxes?

17 Survey Results DETAILED FINDINGS

18 Awareness of Security Threats to Smartphones 20% 6% 17% Three-fourths (73%) are aware of security threats to smartphones. Men are significantly* more likely than women to be very aware of security threats (24% vs. 13%). 56% Very aware I am familiar with the specific types of threats that can occur Somewhat aware I know my phone can be susceptible to threats; I just don t know what kind of threats Somewhat unaware I ve heard that mobile phones can be susceptible, but I don t know anything about it Very unaware What! You re telling me my smartphone is susceptible to threats. What kind of threats? Q.4 How aware are you of security threats to smartphones? * Difference between groups is statistically significant at 95% confidence interval

19 Concern About Security Threats to Smartphones 3% 19% 48% 30% Almost four-fifths (78%) are concerned about security threats. Smartphone users who are aware of security threats to smartphones are much more concerned than smartphone users who are not aware about those threats (83% vs. 66%). Concern about security threats increases with age. Very concerned Somewhat concerned Not too concerned Not at all concerned Concerned 61% 70% 79% 84% 82% Q.5 How concerned are you about security threats to your smartphone?

20 Awareness That Smartphones Contain Personal Information 11% Nine out of ten (89%) are aware that smartphones contain personal information. Men are significantly* more likely than women to be aware that smartphones contain personal information (92% vs. 87%). Awareness tends to be higher among younger adults % Yes No Yes 96% 91% 87% 86% 88% Parents whose children have smartphones are less likely than parents whose kids don t have smartphones to know that smartphones can contain personal information. * Difference between groups is statistically significant at 95% confidence interval Q.6 Are you aware that your smartphone contains your personal information?

21 Concern About Privacy When Using Smartphones 18% 2% 35% Four-fifths (81%) are concerned about privacy when using smartphones. Awareness that smartphones contain personal information has no bearing on how concerned people are about the issue. Concern tends to be higher among older adults. 46% Concerned 71% 78% 80% 83% 83% Very concerned Somewhat concerned Not too concerned Not at all concerned Q.7 How concerned are you about your privacy when using your smartphone?

22 Awareness and Concern Regarding Smartphones Q.6 Are you aware that your smartphone contains your personal information? Q.7 How concerned are you about your privacy when using your smartphone? Q.4 How aware are you of security threats to smartphones? Q.5 How concerned are you about security threats to your smartphone? 89% 81% 73% 78% Aware that smartphones contain personal information Concerned about privacy when using smartphone Aware of security threats to smartphones Concerned about security threats to smartphone

23 Concern About Specific Threats to Smartphone My lost or stolen phone could fall into the wrong hands, and my contacts, messages and stored data can be misused. 45% 33% 17% 5% My passwords could be stolen and used to gain access to my bank or credit card accounts or online purchasing accounts, such as Paypal or Amazon. 43% 25% 21% 11% I could unknowingly download malicious apps, which can lead to identity theft, damage to my reputation or financial loss. 39% 33% 18% 10% When I use public Wi-Fi hotspots, hackers could steal my digital data, such as personal or financial information. 38% 33% 19% 10% Someone (a stranger or someone you know) could access all the contacts, photos, files, s and text messages on my phone. 35% 34% 24% 7% My location or my children s locations could be tracked without my knowledge for malicious or marketing purposes. 35% 30% 23% 12% Hackers could hijack my phone in the background and use it as a spam engine to send sms and mms spam to my contacts with infected files/links or even my own pictures from my phone. 35% 33% 21% 10% Someone could remote control my camera or microphone and monitor everything that happens around me. 28% 28% 23% 21% I'm very concerned about this risk I'm aware this can happen to me, but I'm not concerned I'm a little concerned about this risk I don't think this will happen to me Q.8 How concerned are you about these specific security and privacy threats to your smartphone?

24 Concern About Specific Threats to Smartphone: By Gender Those who are very concerned/a little concerned 60% 72% 63% 68% 58% 72% 62% 74% 66% 76% 64% 72% 60% 80% 73% 48% Women are more concerned than men on each security and privacy threat Someone could remote control my camera or microphone and monitor everything that happens around me. Hackers could hijack my phone in the background and use it as a spam engine to send sms and mms spam to my contacts with infected files/links or even my own pictures from my phone. * Difference between groups is statistically significant at 95% confidence interval My location or my children s locations could be tracked without my knowledge for malicious or marketing purposes. Someone (a stranger or someone you know) could access all the contacts, photos, files, s and text messages on my phone. Men When I use public Wi-Fi hotspots, hackers could steal my digital data, such as personal or financial information. Women I could unknowingly download malicious apps, which can lead to identity theft, damage to my reputation or financial loss. My passwords could be stolen and used to gain access to my bank or credit card accounts or online purchasing accounts, such as Paypal or Amazon. My lost or stolen phone could fall into the wrong hands, and my contacts, messages and stored data can be misused. Q.8 How concerned are you about these specific security and privacy threats to your smartphone?

25 Decision to Install Security Protection on Mobile Device 58% 21% 21% A majority (58%) do not know enough about mobile security Men are significantly* more likely than women to be aware of the privacy and security risks but are not interested in downloading a mobile security product (26% vs. 18%). As age increases, so too does the percentage of adults who say they don t know enough about mobile security to determine if they need it. I'm aware of the privacy and security risks involved with using my phone but I don't think downloading a mobile security product is necessary. I wouldn't consider doing things like ing, shopping and gaming on my phone if I didn't have mobile security installed. I don't know enough about mobile security to decide whether or not I need to download mobile security Don t know 49% 53% 55% 63% 63% * Difference between groups is statistically significant at 95% confidence interval Q.9 Does your current awareness of and concern about mobile security and privacy threats, such as those described in the previous question, impact your decision to install mobile security protection on your mobile device?

26 Knowledge About Mobile Security Solutions 16% 24% 28% 32% More than four out of ten (44%) know or think they know what they need. Men are significantly* more likely than women to be confident they know or think they know what they need to be protected (52% vs. 40%). iphone users are the most likely to report they need help deciding. iphone Blackberry Android Others I know what I need to be protected - There are a lot of choices available, but I know what I need for my phone and where to get it. I think I know what I need - I ve got an idea what the many security solutions are; I just need to verify I m making the right choice. I need help deciding - There are too many options out there; I don t know what the best solution is for my phone. I don t understand how to protect myself - I don t even know where to begin to look for security solutions. Need help deciding 39% 33% 27% 24% * Difference between groups is statistically significant at 95% confidence interval Q.10 Which one of the following comes closest to how knowledgeable you are about mobile security solutions? By mobile security solutions, I m referring to software or apps that protect you from malware, viruses, spyware and other threats, and monitor intrusions on your privacy and financial data?

27 Provided Information About Security 14% 7% Less than one in ten (7%) were offered information about security. There is not much difference between the various groups in terms of who was or was not offered information about the need for security. 78% Yes No Don't know Q.11 When you bought your smartphone, were you ever offered information about the need for security for your phone?

28 Where Consumers Turn for Mobile Security Information Internet/online/Web (non-specific) 35% Family/friends/co-workers 12% Cell phone company/my carrier (non-specific) 6% Google 4% The store where I bought my phone (non-specific) 3% Apple 3% IT services/it people 3% App store/app market/apps (non-specific) 3% Verizon 3% AT&T 2% Norton 1% Android apps/android sites 1% Sprint 1% McAfee 1% Other 4% None/nothing 6% Don t know 26% BASE: Respondents who were not offered information about security solutions when they bought their phone (n=1,075) Q.12 If you weren t offered information on mobile security solutions when you purchased your phone, what sources, if any, could you have turned to for mobile security information?

29 Types of Security/Software on Smartphones Can exceed 100% because multiple responses were allowed Password protection/lock command 34% Parents are much more likely than non-parents to have password protection/lock command (42% vs. 29%) Data backup Locate/tracking Antivirus software 15% 23% 27% Authentication or identify verification software Privacy protection Wipe command/software, including remote wipe Financial security features, such as transaction verification Parental controls Remote alarm if phone is stolen 12% 12% 10% 8% 8% 7% Anti-eavesdropping Other I have mobile security, but I don't know what they are 2% Less than 0.5%) 20% I do not have mobile security features 30% Q.13 What type of security and/or software do you have on your smartphone?

30 Awareness That Security Features Can Protect Privacy 23% Three-fourths (77%) are aware security features can protect privacy. There is not much difference between the various groups in terms of awareness that security features can protect privacy. 77% BASE: Respondents who do not know or do not have security features on their smartphone (n=567) Yes No Q.14 Are you aware that security features and software can help protect the privacy of your personal information?

31 Reasons for Not Taking Steps to Protect Smartphones Did not know I was at risk/that I needed it/was available 29% I have not thought about it 13% I don t need it/i was told my phone could not get a virus/i am very careful 12% Don t know how/where to purchase 10% Not that concerned/not interested 8% I don t know which software is best/don t know what to buy 5% I don t put personal/financial info on my phone 3% I can t afford it/the cost 3% I don t make transactions on my phone/shop on my phone 3% I have an iphone/thought iphones were already protected/have a Blackberry 1% Other 8% None/nothing/refused 3% Don t know 9% BASE: Respondents with no security features on their smartphone (n=340) Q.15 Why have you not taken steps, such as installing antivirus software, to protect your smartphone from security threats?

32 Steps One Would Take to Protect Phone Can exceed 100% because multiple responses were allowed Antivirus software Privacy protection Password protection/lock command Locate/tracking Anti-eavesdropping Financial security features, such as transaction verification Authentication or identify verification software Remote alarm if phone is stolen Wipe command/software, including remoye wipe 57% 51% 45% 39% 37% 37% 35% 35% 33% Non-parents are more likely than parents to not plan on taking any steps in the next 12 months to protect their phone (17% vs. 12%) Data backup Parental controls Don't know 6% 12% 32% None 1% I have no plans to add security features in the next 12 months 15% BASE: Respondents with no security features on their smartphone (n=344) Q.16 If you were to take steps to protect your phone in the next 12 months, which security features and/or software would you be interested in?

33 Awareness That Phone OS Should be Updated 37% 63% Almost two-thirds (63%) are aware OS should be updated regularly. Men are significantly* more likely than women to be aware that a mobile phone s OS should be updated regularly (73% vs. 58%). Younger adults tend to be more aware than older adults Yes 79% 69% 65% 62% 58% Yes No iphone (67%) and Android (65%) users are the most likely to be aware that their phone s OS should be updated. * Difference between groups is statistically significant at 95% confidence interval Q.17 Prior to this survey, were you aware that owners of mobile phones should update the phone s operating system on a regular basis?

34 Updating OS BASE: Respondents who are aware mobile OS should be updated regularly (n=733) 9% 1% 4% 3% Most (83%) have updated their OS within the last six months. There is not much difference between the various groups as it relates to updating operating systems. 83% Within the last six months Between six months and one year More than one year Don't remember I have never updated my OS Q.18 When is the last time you updated your phone s operating system?

35 Downloading Mobile Apps Almost nine out of ten (87%) download apps. Younger adults are more likely to download apps Download apps 93% 93% 90% 88% 80% 69% 69% Connectivity apps Lifestyle and entertainment apps 36% Business apps 13% I have never downloaded apps on my phone Men are more interested in business apps, while women are more interested in lifestyle and entertainment apps. iphone users download more business and lifestyle and entertainment apps than any other users, while Android users are the most likely to download connectivity apps. Q.19 Do you download any of the following types of applications on your mobile device?

36 Knowledge That Apps Allow Access to Private Data 40% 60% BASE: Respondents who download apps (n=1,004) A majority (60%) who download apps know that their phone can be vulnerable. Parents whose kids have smartphones are less likely than non-parents to know that their phone can be vulnerable (59% vs. 69%). Men are significantly* more likely than women to be aware that downloading apps can make their phone vulnerable to privacy issues and security threats (65% vs. 57%). Yes No * Difference between groups is statistically significant at 95% confidence interval Q.20 Are you aware that these apps typically require that you allow them to access the private data stored on your phone, such as your contacts, photos, device information and more?

37 Ever Lost or Had Smartphone Stolen 4% Very few (4%) have lost or had their smartphone stolen. Groups most likely to have lost their phone or had it stolen include: 1.Household income under $25K 11% year olds 10% 96% Yes No Q.21 Have you ever lost your smartphone or had it stolen?

38 Security Features at Time Phone Was Lost/Stolen Can exceed 100% because multiple responses were allowed Password protection 35% Wipe command/software/including remote wipe 17% Locate/track lost phone 15% Remote lock command 13% Remote alarm if phone is stolen 12% Women are more likely than men to not have had any security features at the time they lost or had their phone stolen (52% vs. 43%) Other Don't know 2% 2% 6% BASE: Respondents who have lost or had smartphone stolen (n=52) None 48% Q.22 What type of security features and/or software did you have at the time your smartphone was lost or stolen?

39 Steps Taken After Phone Was Lost/Stolen Can exceed 100% because multiple responses were allowed Locate/track lost phone 17% Remote wipe phone 15% Remote lock 13% Sound alarm on phone Deactivated/cancelled account 10% 10% Two-thirds (67%) of iphone users did not do anything after their phone was lost or stolen Contacted my provider 6% Got a new phone Don't know 2% 2% BASE: Respondents who have lost or had smartphone stolen (n=52) None 48% Q.23 Which of the following steps did you take when you lost or had your phone stolen?

40 Stolen/Lost Phone Retrieved 67% BASE: Respondents who have lost or had smartphone stolen (n=52) 33% Two-thirds (67%) who lost or had their smartphone stolen never retrieved it. It appears that there is not a connection between taking steps after a phone was lost or stolen and retrieving the phone. Men were more successful than women in retrieving their phones (43% vs. 26%). Households earning $100K+ were the most successful in retrieving their lost/stolen phone (70%). Yes No Q.24 Were you successful in retrieving your lost or stolen phone?

41 Knowledge That Using Wi-Fi May Expose Info to Hackers 43% 57% Yes No More than half (57%) are aware that using Wi-Fi may be harmful. Men are significantly* more likely than women to be aware that using Wi-Fi may expose their phones to hackers (67% vs. 52%). Parents whose kids have smartphones are less likely than non-parents to know that using Wi- Fi may expose their phones to hackers (60% vs. 52%). Q.25 Studies show that mobile devices are increasingly susceptible to Wi-Fi attacks, including applications that enable hackers to easily log into victim s , Web and social networking apps. Are you aware that by using Wi-Fi connections on your smartphone to access Internet sites that require password logins, such as Facebook, Paypal, Amazon and Twitter, you might be exposing your personal and financial data to tech-savvy hackers using software that scans the airwaves for unprotected transmissions? * Difference between groups is statistically significant at 95% confidence interval

42 Response to Knowledge That Using Wi-Fi May Expose Info to Hackers Can exceed 100% because multiple responses were allowed 41% 26% 26% 21% 16% Overall, most (84%) would take action to reduce potential Wi-Fi security threats. A strong majority (88%) of the smartphone users who were not aware report that as a result of being informed, they would take action to reduce Wi-Fi security threats. Reduce how much I use Wi- Fi hotspots Get security software Update or upgrade my security software Stop using Wi- Fi hotspots Nothing Q.26 Knowing this (Q.25), which of the following are you likely to do as a response?

43 Concern About Accessing Data on Smartphone Passwords 49% 18% 9% 4% 20% Banking or other financial data 46% 12% 5% 3% 34% Info about my contacts 33% 28% 24% 9% 7% Contact list 29% 32% 28% 10% 1% s 28% 30% 24% 9% 9% Photos and videos 23% 26% 32% 15% 3% Work-related data 20% 14% 15% 10% 41% Text messages 20% 24% 30% 18% 8% Voic s 17% 21% 32% 22% 9% Very concerned Somewhat concerned Not too concerned Not at all concerned I don't store this on my phone Q.27 When you consider the type of data you may store in your phone, how concerned would you be if someone could access that data?

44 Concern About Accessing Data on Smartphone: By Gender 70% Those who are very concerned/somewhat concerned 64% 63% 61% 61% 62% 55% 54% 56% 51% 51% 48% 41% 36% 36% Women are more concerned overall than men about someone accessing their personal data * Difference between groups is statistically significant at 95% confidence interval 30% 34% 33% Passwords* Info about my contacts* Contact list* s* Banking or other financial data* Photos and videos* Text messages* Voic s* Work-related data Men Women Q.27 When you consider the type of data you may store in your phone, how concerned would you be if someone could access that data?

45 Likelihood of Adding Security to Keep Data Secure BASE: Respondents who are concerned about data being accessed (see slide 46) Banking or other financial data 74% 22% 5% Passwords 70% 26% 4% Work-related data 63% 31% 7% Info about my contacts 55% 38% 7% s 54% 37% 8% Voic s 52% 40% 8% Text messages 51% 40% 9% Contact list 48% 43% 9% Photos and videos 48% 41% 11% Very likely Somewhat likely Not likely Q.28 For the contents on your phone that you are very concerned about, how likely would you be to add security to your phone to keep that data secure?

46 Concern About Protecting Privacy of Your Location When Using Phone 49% 51% Respondents are split on whether they are concerned about protecting their location. Women are significantly* more likely than men to be concerned about protecting privacy of their location (55% vs. 43%). Certain age groups are more concerned than others. 52% 60% 61% 49% 42% Yes No * Difference between groups is statistically significant at 95% confidence interval Q.29 Are you concerned about protecting the privacy of your location when using your mobile phone?

47 Entities That Can Determine Location When Phone is Turned On Can exceed 100% because multiple responses were allowed Your carrier 87% Overall, men are more likely than women to believe that these entities can determine their location Hackers Legitimate apps Search engines Malicious apps Location-based services Your Facebook friends Your handset maker 57% 54% 51% 49% 38% 37% 29% People who view photos you post from your phone Advertisers Data aggregators 28% 28% 24% None; I don't believe they can determine my location 5% Q.30 Are you aware that certain entities can determine your location when your mobile phone is turned on? From the list below, check the entities that you think can determine your location when your phone is turned on.

48 Turning off Permissions for Location Tracking 50% 50% Half (50%) know how to turn off location tracking. Men are significantly* more likely than women to know how to turn off permissions for location tracking (61% vs. 45%). Younger adults are more likely to know how to turn off permissions for location tracking Yes 60% 61% 52% 44% 46% Yes No Q.31 Do you know how to turn off or set permissions for location tracking in the apps on your phone? * Difference between groups is statistically significant at 95% confidence interval

49 Disabling Geotagging 62% 38% Almost two-thirds (62%) do not know how to disable geotagging. Men are significantly* more likely than women to know how to disable geotagging (44% vs. 34%). Knowledge of disabling geotagging decreases with age Yes 57% 48% 41% 30% 31% Yes No * Difference between groups is statistically significant at 95% confidence interval Q.32 Do you know how to disable geotagging?

50 StaySafeOnline.org

51