I Was Told to Install the Antivirus App, but I'm Not Sure I Need It: Understanding Smartphone Antivirus Software Adoption and User Perceptions

Research Background and Issues

• Key Issues and Challenges:

  1. With the widespread adoption of smartphones, the threat of mobile malware has become increasingly severe. However, user awareness and adoption rates of mobile antivirus software remain low.
  2. In countries like South Korea, financial institutions such as banks mandate the installation of antivirus software, yet many users misunderstand the functionality and scope of such software.
  3. Users may harbor skepticism toward antivirus software (e.g., questioning its effectiveness or concerns about high system resource consumption), which could lead to interrupted usage or complete non-adoption.

• Significance: The growing threat to mobile security, especially within the open Android ecosystem, poses significant risks to data and privacy if antivirus software adoption rates remain insufficient. Furthermore, negative perceptions of mandatory antivirus software installation may hinder effective collaboration between users and security technologies, thereby reducing the efficacy of regulatory policies.

• Research Motivation and Related Work:

  1. While extensive research has focused on antivirus behavior on computers, studies specifically targeting smartphones are limited.
  2. Previous theoretical models (e.g., Protection Motivation Theory, PMT) primarily consider individual-level factors, overlooking the impact of mandatory installation and social norms on software adoption.
  3. South Korea’s unique mandatory antivirus installation regulations provide a distinctive socio-cultural context for analyzing user behavior.

Solutions

• Methods and Innovations:

  1. The authors employed a mixed-methods approach (in-depth interviews with 23 users and a survey of 250 users) to explore users’ perceptions, adoption, and usage patterns of smartphone antivirus software.
  2. The study extended the Protection Motivation Theory (PMT) by incorporating two new factors: social norms (e.g., recommendations from friends and family) and awareness.
  3. The impact of South Korea’s mandatory installation requirements was analyzed, particularly in terms of their influence on user understanding, adoption, and abandonment behaviors.

• Implementation Steps and Techniques:

  1. Interviews:
     • Explored users’ misconceptions about antivirus software functions, such as confusing them with general security software or performance optimization tools.
     • Differentiated between two types of antivirus tools: standalone and plugin-based.
  2. Survey:
     • Designed a questionnaire based on the extended PMT model to validate key factors influencing user intentions.
     • Conducted multiple linear regression analysis on survey results to explain the contribution of factors to user adoption intentions.

Research Findings

• Key Results:

  1. Usage Patterns:
     • Users often passively use plugin-based antivirus software (frequently bundled with banking apps) and misunderstand its protective scope (e.g., only active when the main app is running).
     • Voluntary adoption rates of standalone software are very low, with most users activating scanning functions only after specific incidents (e.g., installing apps from unknown sources or receiving malicious messages).
  2. Influencing Factors:
     • Social norms were the most significant factor influencing user adoption intentions (standardized coefficient β=0.4413).
     • Perceived vulnerability, response efficacy, self-efficacy, and security-related awareness also significantly impacted adoption intentions.
     • Perceived severity and response cost had no significant impact on adoption intentions, indicating platform-specific differences in risk perception.
  3. Comparative Analysis:
     • Unlike smartphones, users are more inclined to actively adopt continuous real-time protection on PCs.
     • Users perceive higher performance overhead on mobile devices, which is a major reason for abandoning smartphone antivirus software.

• Advantages Over Existing Solutions:

  1. In-depth analysis of platform differences, highlighting distinct security behaviors between PCs and smartphones.
  2. Extension of the traditional PMT model, providing a more comprehensive theoretical framework for understanding mobile security behaviors.
  3. Recommendations from an interdisciplinary perspective, addressing both technical design and policy optimization in the context of mandatory installation regulations.

• Experimental and Evaluation Results:

  1. The survey revealed that the adoption rate of smartphone antivirus software in South Korea is 54%, significantly higher than the global average (17%), though many users have misconceptions about its functional scope.
  2. The adjusted R² of the regression model was 0.505, indicating that approximately 50% of the variance in behavioral intentions could be explained by the model.
  3. Performance issues and distrust were identified as the primary reasons for user abandonment in the user experience analysis.

• Limitations and Future Directions:

  1. Limitations:
     • The study primarily focused on South Korean users, and its findings may be constrained by the specific regulatory environment of the region, limiting generalizability to other countries.
     • The model leaves unexplained variance in behavioral intentions, suggesting the potential influence of other external factors not yet incorporated.
  2. Future Directions:
     • Explore ways to bridge the gap between “passive installation” and “active engagement” among users.
     • Conduct cross-cultural studies to compare how different national regulatory policies influence software adoption and security behaviors.
     • Improve technical design by enhancing performance optimization and user education to improve user experience and trust in antivirus software.