[目的/意义]通过了解大学生信息安全知识、信息安全意识及行为的状况，发现其中存在问题，并提出应对措施。[方法/过程]采取问卷调查的形式，以天津工业大学学生智能手机用户作为调查对象，从用户个人基本信息、使用智能手机信息安全意识状况、智能手机用户信息安全行为状况、智能手机用户信息安全知识掌握情况、用户信息安全知识的来源以及对知识的需求程度5个方面进行调查。[结果/结论]调查结果显示：大学生智能手机用户对常识类信息安全知识掌握程度较专业类知识好；大学生信息安全意识相对薄弱，男生信息安全意识高于女生；大学生使用应用程序行为存在很大隐患，信息保护行为有待加强；信息安全知识是信息安全意识的前提，信息安全意识通过行为表现，但信息安全意识不一定转化为实际行为。性别与信息安全意识、信息安全行为存在显著性差异，与信息安全知识差异性不显著。根据调查现状，提出培养学生识别信息安全威胁、规避信息安全风险的能力、提高学生基本的信息安全防护能力、加强学生信息安全道德伦理和法律法规教育等建议。
[Purpose/significance] This article aims to understand the information security knowledge, information security awareness and behavior of undergraduates, to find the existing relationships and problems, and to propose countermeasures.[Method/process] Through questionnaire survey, the smart phone users in Tianjin Polytechnic University students are investigated from five areas of the basic personal information of users, the use of smart phone information security awareness, smart phone user information security behavior, smart phone user information security knowledge, the source of user information security knowledge and the degree of knowledge needs.[Result/conclusion] The investigation and analysis show that college students smartphone users have better knowledge of common-sense information security than professional ones,the awareness of information security is relatively weak, and the awareness of boys is higher than that of girls. There is a great hidden danger in information security and information protection should be strengthened. Information security knowledge is the premise of information security awareness, and information security awareness is expressed through behavior, but awareness of information security does not necessarily translate into practical behavior. There is a significant difference between gender and information security awareness as well as information security behavior, but there is no significant difference with information security knowledge. Finally, according to the status quo of the investigation, this paper puts forward three suggestions:cultivating students' ability of identifying information security threat, avoiding information security risk, improving students' basic ability of information security protection, and strengthening students' ethics of information security and education of laws and regulations.
[1] 中国产业信息网.2017年中国智能手机保有量、普及率及行业发展趋势[EB/OL].[2017-05-06].http://www.chyxx.com/industry/201703/505462.html.
[2] 钱定瑞. 智能手机信息安全仍堪忧[N]. 中国国防报,2014-07-30(004).
[3] 搜狐网.2017年中国Android手机隐私安全报告发布[EB/OL].[2018-01-15].http://www.sohu.com/a/194553890_208076.
[4] 程宇贤,刘志亮,殷俊,等. 移动互联时代智能手机信息安全问题与对策分析[J].信息网络安全,2012(12):74-76.
[5] 席振洋. 智能手机的信息安全问题探讨[J].科技展望,2016(26):8.
[6] 张晓娟,刘霁,李贞贞. 移动互联时代智能手机使用中的个人信息安全问题研究——大学生手机使用行为调查与分析[J].大学图书情报学刊,2016(2):28-32.
[7] 朱圣军,刘功申,罗俊,等. 智能手机病毒与信息安全[J].信息安全与通信保密,2011(5):96-97,100.
[8] 郭旨龙.智能手机时代的个人信息安全态势与策略[J].保密工作,2015(4):50-51.
[9] 王勇,廖志孟,夏聪颖. 智能手机的信息安全问题探讨[J]. 科技广场,2015(11):50-60.
[10] 王鹏程. Android智能手机信息安全研究[D].青岛:中国海洋大学,2013.
[11] 张敏,郝素冰,龚子捷,等.大学生信息安全认知的测量及其与人格特征的关系[J].高等工程教育研究,2016(6):144-148,174.
[12] 程文凤. 公民手机信息安全问题探讨——由3·15晚会曝光安卓事件引发的思考[J]. 法制与经济(下),2013(5):11-12.
[13] 张艺璇,张春柳,周建芳.大学生网络信息安全研究——以江苏省南京市为例[J].中国教育信息化,2017(15):62-64.
[14] 周晓婷,谷仕艳,刘婷婷,等.大学生网络信息安全现状解析及对策探讨——以成都市大学生为例[J].云南农业大学学报(社会科学),2017,11(03):94-100.
[15] ALLAM S,FLOWERDAY S,FLOWERDAY E. Smartphone information security awareness:a victim of operational pressures[J]. Computers & security,2014(4):56-65.
[16] MYLONAS A,KASTANIA A,GRITZALIS D. Delegate the smartphone user? security awareness in smartphone platforms[J].Computers & security,2013(3):47-66.
[17] SARI P,CANDIWAN C. Measuring information security awareness of indonesian smartphone users[J].Telkomnika,2014(2):493-500.
[18] OPHOFF J,ROBINSON M. Exploring end-user smartphone security awareness within a South African context[C]//Information security for South Africa.Johannesburg, South Africa:IEEE,2014:1-7.
[19] JONES B,HEINRICHS L. Do business students practice smartphone security[J].Journal of computer information systems,2012(2):22-30.
[20] JONES B,CHIN A. On the efficacy of smartphone security:a critical analysis of modifications in business students' practices over time[J]. International journal of information management,2015(5):561-571.
[21] 罗力.论国民信息安全素养的培养[J].图书情报工作,2012,56(6):25-28.
[22] 张晓娟,李贞贞.智能手机用户信息安全意识与行为研究[J].图书馆学研究,2017(2):52-57,63.
[23] HUSSEIN R,LAMBENSA F,ANOM R.Information security behaviour:a descriptive analysis on a malaysian public university[EB/OL].[2017-12-23].http://eprints.sunway.edu.my/114/.
[24] 马颜军.智能手机安全隐患分析与对策[J].网络安全技术与应用, 2013(10):94-95.
