Cyber Security Awareness among College Students: Knowledge Gaps, Behavioral Inconsistencies, and Institutional Remediation

Abstract

As higher education institutions migrate academic administrative infrastructure, collaboration platforms, and instructional delivery systems to decentralized cloud environments, university campuses have emerged as high-value target vectors for sophisticated cyber adversaries. Students represent both the largest user cohort and the soft outer perimeter of campus enterprise networks. Despite pervasive assumptions regarding the innate technological literacy of "digital natives," empirical evaluations reveal an acute divergence between routine software fluency and applied defensive cyber hygiene. This research paper presents a comprehensive empirical and theoretical study on cybersecurity awareness among college students, investigating systemic vulnerabilities across credential management, contextual spear-phishing discernment, public unencrypted network exposures, and digital social intelligence leakage. Combining the Knowledge-Attitude-Behavior (KAP) paradigm with Protection Motivation Theory (PMT), the study analyzes survey responses (N = 420) across diversified undergraduate academic programs. The empirical evidence demonstrates that while cognitive awareness of abstract threats is moderate to high, behavioral execution degrades significantly due to convenience penalties, cognitive optimism bias, and alert fatigue. To eliminate institutional exposure and credential cascade across university networks, this study outlines a four-pillar remediation framework integrating mandatory multi-factor authentication (MFA), active micro-simulation pedagogy, cross-disciplinary curricula, and zero-trust network segmentation.