Understanding the most common misconceptions in IT security