Few Americans understand cyber security, study finds