Follow the blue bird: A study on threat data published on Twitter

Open Source Intelligence (OSINT) has taken the interest of cybersecurity practitioners due to its completeness and timeliness. In particular, Twitter has proven to be a discussion hub regarding the latest vulnerabilities and exploits. In this paper, we present a study comparing vulnerability databases between themselves and against Twitter. Although there is evidence of OSINT advantages, no methodological studies have addressed the quality and benefits of the sources available. We compare the publishing dates of more than nine-thousand vulnerabilities in the sources considered. We show that NVD is not the most timely or the most complete vulnerability database, that Twitter provides timely and impactful security alerts, that using diverse OSINT sources provides better completeness and timeliness of vulnerabilities, and provide insights on how to capture cybersecurity-relevant tweets

Information security collaboration formation in organisations

This is an accepted manuscript of an article published by The Institution of Engineering and Technology in IET Information Security, available online: https://doi.org/10.1049/iet-ifs.2017.0257 The accepted version of the publication may differ from the final published version.Collaboration between employees in the domain of information security efficiently mitigates the effect of information security attacks on organisations. Collaboration means working together to do or to fulfil a shared goal, the target of which in this paper is the protection of the information assets in organisations. Information Security Collaboration (ISC) aims to aggregate the employees’ contribution against information security threats. This study clarifies how ISC is to be developed and how it helps to reduce the effect of attacks. The socialisation of collaboration in the domain of information security applies two essential theories: Social Bond Theory (SBT) and the Theory of Planned Behaviour (TPB). The results of the data analysis revealed that personal norms, involvement, and commitment significantly influence the employees’ attitude towards ISC intention. However, contrary to our expectation, attachment does not influence the attitude of employees towards ISC. In addition, attitudes towards ISC, perceived behavioural control, and personal norms significantly affect the intention towards ISC. The findings also show that the intention for ISC and organisational support positively influence ISC, but that trust does not significantly affect ISC behaviour.Published versio

Assessment of Alcohol Use Patterns Among Spanish-Speaking Patients

OBJECTIVE: To assess drinking patterns of Spanish-speaking patients using a bilingual Computerized Alcohol Screening and brief Intervention (CASI) tablet computer equipped with the Alcohol Use Disorders Identification Test (AUDIT). METHODS: This retrospective study was conducted in a tertiary university hospital emergency department (ED) between 2006 and 2010. Data from 1,816 Spanish-speaking ED patients was analyzed using descriptive statistics, the chi-square test for independence, and the Kruskal-Wallis rank sum test for comparisons using quantitative variables. RESULTS: Overall, 15% of Spanish-speaking patients were at-risk drinkers, and 5% had an AUDIT score consistent with alcohol dependency (≥20). A higher percentage of Spanish-speaking males than females were at-risk drinkers or likely dependent. Spanish speaking males exhibited higher frequency of drinking days per week and higher number of drinks per day compared to females. Among older patients, non-drinking behavior increased and at-risk drinkers decreased. The majority of males and females were ready to change their behavior after the CASI intervention; 61% and 69% respectively scored 8-10. CONCLUSIONS: This study indicated that CASI was an effective tool for detecting at-risk and likely dependent drinking behavior in Spanish-speaking ED patients. The majority of patients were ready to change their drinking behavior. More alcohol screening and brief intervention tools should be tested and become readily accessible for Spanish-speaking patients

The FinTech Industry: Crowdfunding in Context

International audienceThis chapter presents how the financial services sector, especially banking, was a driver for ICT development in the last quarter of the twentieth century and early years of this century. But several phenomena happened on technological, social, and financial fronts in the second half of the last decade that led banks to `get their eyes off the ball' and open the window for a whole new industrial sector to emerge, FinTech. This chapter analyses the phenomenon with the objective of answering: Why did FinTech emerge as an industrial sector, independent of banking? How is the FinTech industry organized and where does crowdfunding fit in? The chapter identifies three external forces that acted upon the banking system and created the conditions for the FinTech sector to emerge. It also looks at the FinTech sector from an industrial organization perspective and proposes a framework connecting financial services functionality and technological applications. © The Editor(s) (if applicable) and The Author(s) 2020