What is the project?

An important security concern is that people don't ensure that their computers are secure. Why does this happen?

Is it because people don't care?
Is it because people can't figure out how to effectively use the tools, programs, and tricks?
Or, is it because people don't know or understand the risk? 

The last answer is the theme of most of my research. 

I am looking into three main areas: 
   Phishing: What do people think phishing is? Do they understand the risk?
   Digital Certificates: What do people think certificates are? Do they understand the potential risk    of not paying attention to them? 
   Passwords: How do we create strong memorable passwords? How do visual cues impact            password retention?