{"id":115447,"date":"2026-11-11T11:14:52","date_gmt":"2026-11-11T10:14:52","guid":{"rendered":"https:\/\/industry-science.com\/?post_type=article&p=115447"},"modified":"2026-11-11T11:15:33","modified_gmt":"2026-11-11T10:15:33","slug":"differences-in-it-security-behavior-and-knowledge-of-private-users-in-germany","status":"publish","type":"article","link":"https:\/\/industry-science.com\/en\/articles\/differences-in-it-security-behavior-and-knowledge-of-private-users-in-germany\/","title":{"rendered":"Differences in IT Security Behavior and Knowledge of Private Users in Germany"},"content":{"rendered":"\n

Abstract<\/strong> <\/p>\n\n\n\n

The German Federal Office for Information Security (Bundesamt f\u00fcr \u00a0Sicherheit in der Informationstechnik) offers advice and recommendations for \u00a0private users on how to behave securely. Based on these recommendations we \u00a0investigate the IT security knowledge and behavior of private users with a rep-resentative study of the German population (N = 1.219). Additionally, we ana-lyze the role of socio-demographic factors (gender, age, education, political ori-entation) for security knowledge and behavior. Results show that German pri-vate users have only moderate IT security knowledge and behavior, with as-pects as gender, age, education and political orientation partly having an influ-ence. Men, higher educated and politically moderately oriented participants \u00a0show higher security knowledge, whereas young people and those less knowl-edgeable about security behave less security-conscious. Additionally, security \u00a0knowledge and behavior correlate moderately. Therefore, to increase private \u00a0users\u2019 IT security we suggest to increase education and training especially for users being young, politically right-wing or female.<\/p>\n\n\n\n

Introduction<\/strong><\/p>\n\n\n\n

With the advancing digitalization more than 90% of Germans currently use the Inter-net and share an increasing amount of data \u2013 including sensitive data \u2013 which needs to be protected [1]. The importance of IT security1 is illustrated, for example, by \u00a0Deutsche Telekom (Europe’s largest telecommunications company) reporting 46 mil-lion attacks on their honeypots in April 2019, an increase of 12 million and 4 million \u00a0attacks respectively compared with the years 2018 and 2017 [2]. In 2017 the German \u00a0Federal Criminal Police Office (Bundeskriminalamt) recorded around 86.000 inci-dents of cybercrime, 4% more than in 2016, and a total damage in excess of \u00a071 million euros with an increase of 54% on mobile malware [3]. This shows the \u00a0increasing threat to security.<\/p>\n\n\n\n

One reason for this is the disuse or improper use of security mechanisms and thus  the need for an extended security knowledge and behavior for all users, including  private users. In order to contribute to security in Germany, the Federal Office for  Information Security (Bundesamt f\u00fcr Sicherheit in der Informationstechnik, BSI)  offers advice for German citizens on how to secure their computer, smartphone and  online generated data which we used as the basis for our questionnaire [4]. A repre-sentative study by the BSI in 2017 showed that 97% of German Internet users consid-er security to be very important but only a third of Germans specifically inform them-selves about security [5]. Just 75% use anti-virus software, 45% of Germans care  about the secure transfer of personal data and only 37% install updates right away [5].  Hence, similarly to the frequently studied privacy paradox (e.g. [6-8]), a security  paradox seems to exist, as users claim to care about their security, but do not inform  themselves about it and thus do not act accordingly. Therefore, security knowledge  and behavior might not correlate, as security knowledge might not translate into be-havior. Furthermore, the study by the BSI found that 59% of participants state to have  never been victims of cybercrime and that only about 19% of those affected by cyber-crime filed a police complaint [5]. According to the BSI, the actual number of cyber-crimes is much higher than the reported numbers [5]. This underlines the ambivalent  behavior of people concerning security and shows that not all attacks and crimes are  recorded, especially when it comes to private users. Additionally, some studies have  lately suggested that security behavior differs regarding demographic aspects such as  age and gender [9-11] and call for more research on security behavior [12, 13].  <\/p>\n\n\n\n

In order to check if the described lack of IT security knowledge and behavior still \u00a0exists and to identify which groups of people show how much security knowledge and \u00a0behavior we aim to investigate the security knowledge and behavior of Germans in \u00a02019 regarding the demographic factors age, gender, education and political orienta-tion. We therefore raise the question: How do different subgroups of private users<\/em> (e.g. gender, age groups) differ in their security knowledge and behavior? \u00a0\u00a0<\/em>To address this research question, we conducted an online study representative for \u00a0the German population with 1.219 participants. In the following sections related \u00a0works are presented, followed by the hypotheses and the used methods. After illus-trating the results, we discuss our findings. \u00a0<\/p>\n

Your downloads<\/h2>