Communicating mobile security threats and best practices has become a central objective due to the ongoing discovery of new vulnerabilities of mobile devices. To cope with this overarching issue, the goal of this paper is to identify and analyze existing threats and best practices in the domain of mobile security. To this extent, we conducted a literature review based on a set of keywords. The obtained results concern recognizable threats and established best practices in the domain of mobile security. Afterwards, this outcome was put forward for consideration by mobile application users (n = 167) via a survey instrument. To this end, the results show high awareness of the threats and their countermeasures in the domain of mobile applications. While recognizing the risks associated with physical and social factors, the majority of respondents declared the use of built-in methods to mitigate the negative impact of malicious software and social-engineering scams. The study results contribute to the theory on mobile security through the identification and exploration of a variety of issues, regarding both threats and best practices. Besides this, this bulk of up-to-date knowledge has practical value which reflects in its applicability at both the individual and enterprise level. Moreover, at this point, we argue that understanding the factors affecting users’ intentions and motivations to accept and use particular technologies is crucial to leverage the security of mobile applications. Therefore, future work will cover identifying and modeling users’ perceptions of the security and usability of mobile applications.

中文翻译：

---

移动安全：威胁和最佳实践

由于不断发现移动设备的新漏洞，因此交流移动安全威胁和最佳做法已成为中心目标。为了解决这一总体问题，本文的目标是识别和分析移动安全领域中的现有威胁和最佳实践。在此程度上，我们根据一组关键字进行了文献综述。获得的结果涉及移动安全领域中可识别的威胁和已建立的最佳实践。之后，提出了此结果，供移动应用程序用户考虑（n = 167）。为此，结果显示了对移动应用程序领域中的威胁及其对策的高度了解。在意识到与物理和社会因素相关的风险的同时，大多数受访者宣称使用内置方法来减轻恶意软件和社会工程骗局的负面影响。研究结果通过识别和探索有关威胁和最佳实践的各种问题，为移动安全理论做出了贡献。除此之外，大量的最新知识具有实用价值，这反映了其在个人和企业层面的适用性。而且，在这一点上，我们认为，了解影响用户使用和接受特定技术的意图和动机的因素对于利用移动应用程序的安全性至关重要。因此，未来的工作将涵盖识别和建模用户对移动应用程序的安全性和可用性的看法。