Risk homeostasis in information security:challenges in confirming existence and verifying impact

The central premise behind risk homeostasis theory is that humans adapt their behaviors, based on external factors, to align with a personal risk tolerance level. In essence, this means that the safer or more secure they feel, the more likely it is that they will behave in a risky manner. If this effect exists, it serves to restrict the ability of risk mitigation techniques to effect improvements.The concept is hotly debated in the safety area. Some authors agree that the effect exists, but also point out that it is poorly understood and unreliably predicted. Other re-searchers consider the entire concept fallacious. It is important to gain clarity about whether the effect exists, and to gauge its impact if such evidence can indeed be found.In this paper we consider risk homeostasis in the context of information security. Similar to the safety area, information security could well be impaired if a risk homeostasis effect neutralizes the potential benefits of risk mitigation measures. If the risk homeostasis effect does indeed exist and does impact risk-related behaviors, people will simply elevate risky behaviors in response to feeling less vulnerable due to following security procedures and using protective technologies.Here we discuss, in particular, the challenges we face in confirming the existence and impact of the risk homeostasis effect in information security, especially in an era of ethical research practice

Safety and Security Analysis of AEB for L4 Autonomous Vehicle Using STPA

Autonomous vehicles (AVs) are coming to our streets. Due to the presence of highly complex software systems in AVs, there is a need for a new hazard analysis technique to meet stringent safety standards. System Theoretic Process Analysis (STPA), based on Systems Theoretic Accident Modeling and Processes (STAMP), is a powerful tool that can identify, define, analyze and mitigate hazards from the earliest conceptual stage deployment to the operation of a system. Applying STPA to autonomous vehicles demonstrates STPA\u27s applicability to preliminary hazard analysis, alternative available, developmental tests, organizational design, and functional design of each unique safety operation. This paper describes the STPA process used to generate system design requirements for an Autonomous Emergency Braking (AEB) system using a top-down analysis approach to system safety. The paper makes the following contributions to practicing STPA for safety and security: 1) It describes the incorporation of safety and security analysis in one process and discusses the benefits of this; 2) It provides an improved, structural approach for scenario analysis, concentrating on safety and security; 3) It demonstrates the utility of STPA for gap analysis of existing designs in the automotive domain; 4) It provides lessons learned throughout the process of applying STPA and STPA-Sec

Tort, Social Security, and No-Fault Schemes: Lessons from Real-World Experiments

Background Anthropometric measurements are useful in clinical practice since they are non-invasive and cheap. Previous studies suggest that sagittal abdominal diameter (SAD) may be a better measure of visceral fat depots. The aim of this study was to prospectively explore and compare how laboratory and anthropometric risk markers predicted subclinical organ damage in 255 patients, with type 2 diabetes, after four years. Methods Baseline investigations were performed in 2006 and were repeated at follow-up in 2010. Carotid intima-media thickness (IMT) was evaluated by ultrasonography and aortic pulse wave velocity (PWV) was measured with applanation tonometry over the carotid and femoral arteries at baseline and at follow-up in a cohort of subjects with type 2 diabetes aged 55–65 years old. Results There were significant correlations between apolipoprotein B (apoB) (r = 0.144, p = 0.03), C - reactive protein (CRP) (r = 0.172, p = 0.009) at baseline and IMT measured at follow-up. After adjustment for sex, age, treatment with statins and Hba1c, the associations remained statistically significant. HbA1c, total cholesterol or LDL-cholesterol did not correlate to IMT at follow-up. Baseline body mass index (BMI) (r = 0.130, p = 0.049), waist circumference (WC) (r = 0.147, p = 0.027) and sagittal Abdominal Diameter (SAD) (r = 0.184, p = 0.007) correlated to PWV at follow-up. Challenged with sex, SBP and HbA1c, the association between SAD, not WC nor BMI, and PWV remained statistically significant (p = 0.036). In a stepwise linear regression, entering both SAD and WC, the association between SAD and PWV was stronger than the association between WC and PWV. Conclusions We conclude that apoB and CRP, but not LDL-cholesterol predicted subclinical atherosclerosis. Furthermore, SAD was more independent in predicting arterial stiffness over time, compared with WC, in middle-aged men and women with type 2 diabetes.Funding Agencies|Medical Research Council of Southeast Sweden||Center for Medical Image Science and Visualization (CMIV)||Linkoping University||Futurum||King Gustaf V and Queen Victoria Freemason Foundation||GE Healthcare||Swedish Heart-Lung Foundation||Swedish Research Council Grant|12661|</p

A User Perception Model Concerning Safety and Security of Paratransit Services in Bandung, Indonesia

Safety and security in public transportation, Angkutan Kota or paratransit included, are among the commonly poor aspects in Indonesia. The objective of this research is to describe user perception of safety and security aspects in paratransit operation and to develop a model to predict and explain user choice in the future when there is an improvement. Users stated that the conditions of safety and security could be categorized as fair to dangerous. Realizing the condition, users still want to use paratransit because they have no other mode and paratransit can easily be found. The main reason for safety problems was the low degree of awareness of the driver in operating the car, while the main reason for security problems was the low degree of law enforcement and limited number of policemen (security officers). Users stated that the most responsible stakeholder in safety and security was the operator (driver and owner) and the police. Each aspect has two models using binomial logistic regression, namely a model with and without experience of accidents or criminal incidents. All models seem quite appropriate ones, as shown by their statistical measurement. Incorporating user experience improved the model fitness and improved the model in describing traveler characteristics