Rebooting IT Security Awareness – How Organisations Can Encourage and Sustain Secure Behaviours

Most organisations are using online security awareness training and simulated phishing attacks to encourage their employees to behave securely. Buying off-the-shelf training packages and making it mandatory for all employees to complete them is easy, and satisfies most regulatory and audit requirements, but does not lead to secure behaviour becoming a routine. In this paper, we identify the additional steps employees must go through to develop secure routines, and the blockers that stop a new behaviour from becoming a routine. Our key message is: security awareness as we know it is only the first step; organisations who want employees have to do more to smooth the path: they have to ensure that secure behaviour is feasible, and support their staff through the stages of the Security Behaviour Curve – concordance, self-efficacy, and embedding – for secure behaviour to become a routine. We provide examples of those organisational activities, and specific recommendations to different organisational stakeholders

Absence of circular polarisation in reflections of butterfly wing scales with chiral gyroid structure

The single Gyroid, a triply-periodic ordered chiral network of cubic symmetry, appears as a nanostructure in the green-colored wing scales of various butterflies. In lossless and perfectly ordered single Gyroid materials, the structural chirality leads to circularly polarized reflections from crystals oriented in the [100] direction. Here we report a circular polarisation study of the macroscopic reflections of the wing scales of Callophrys rubi and Teinopalpus imperialis that reveals no circular dichroism, that is, we find no significant difference in the reflectance values for left- and right-circularly polarized light. The reasons for the absence of circularly polarized reflections is likely to be a compound effect of various factors, including crystallite orientation, presence of both left- and right-handed single Gyroid enantiomers, and structural disorder. Each of these factors weakens, but does not fully extinguish, the circular polarisation signal. We further find a substantial amount of blue-absorbing pigment in those wing scales of C. rubi that are structured according to the single Gyroid. Numerical simulations demonstrate that absorption, while evidently reducing overall reflectance, does generally not reduce the circular dichroism strength. The experimental findings of this paper, however, clearly demonstrate that circular dichroism is absent from the reflections of the butterfly wing scale. Henceforth, the chiro-optical response of the idealised structure does not fulfil a biological photonic function

Enabling Proactive Adaptation through Just-in-time Testing of Conversational Services

Service-based applications (SBAs) will increasingly be composed of third-party services available over the Internet. Reacting to failures of those third-party services by dynamically adapting the SBAs will become a key enabler for ensuring reliability. Determining when to adapt an SBA is especially challenging in the presence of conversational (aka. stateful) services. A conversational service might fail in the middle of an invocation sequence, in which case adapting the SBA might be costly; e.g., due to the necessary state transfer to an alternative service. In this paper we propose just-in-time testing of conversational services as a novel approach to detect potential problems and to proactively trigger adaptations, thereby preventing costly compensation activities. The approach is based on a framework for online testing and a formal test-generation method which guarantees functional correctness for conversational services. The applicability of the approach is discussed with respect to its underlying assumptions and its performance. The benefits of the approach are demonstrated using a realistic example

Spotting the diffusion of New Psychoactive Substances over the Internet

Online availability and diffusion of New Psychoactive Substances (NPS) represent an emerging threat to healthcare systems. In this work, we analyse drugs forums, online shops, and Twitter. By mining the data from these sources, it is possible to understand the dynamics of drugs diffusion and their endorsement, as well as timely detecting new substances. We propose a set of visual analytics tools to support analysts in tackling NPS spreading and provide a better insight about drugs market and analysis

Consumers or users? The impact of user learning about smart hybrid heat pumps on policy trajectories for heat decarbonisation

Decarbonisation policies often emphasise the uptake of new end-use technologies, seeing people as consumers of technologies with predictable impacts. In the UK, smart hybrid heat pumps (SHHP) have attracted policy interest as a technology potentially offering multiple benefits for home heat decarbonisation. This paper draws on domestication theory, a perspective that frames people as users who actively learn about technologies, to analyse interviews and observations with installers and users involved in the first UK trial of SHHP. This perspective reveals that users’ learning about SHHPs may erode part of the energy savings they offer and have implications for future technology uptake, including the trajectories of heat decarbonisation currently envisaged by policy makers. However, it also reveals opportunities for policy making to influence user learning, including paying closer attention to material elements such as radiator controls and space to air laundry alongside improved information provision. This could be supported by engaging with users as their learning emerges over time. Overall, the paper highlights the policy relevance of technology use as well as uptake and adds to calls for energy policy to think beyond information provision and economic incentives to engage with households, implying a less deterministic approach to policy making

A World Full of Privacy and Security (Mis)conceptions? Findings of a Representative Survey in 12 Countries

Misconceptions about digital security and privacy topics in the general public frequently lead to insecure behavior. However, little is known about the prevalence and extent of such misconceptions in a global context. In this work, we present the results of the first large-scale survey of a global population on misconceptions: We conducted an online survey with n = 12, 351 participants in 12 countries on four continents. By investigating influencing factors of misconceptions around eight common security and privacy topics (including E2EE, Wi-Fi, VPN, and malware), we find the country of residence to be the strongest estimate for holding misconceptions. We also identify differences between non-Western and Western countries, demonstrating the need for region-specific research on user security knowledge, perceptions, and behavior. While we did not observe many outright misconceptions, we did identify a lack of understanding and uncertainty about several fundamental privacy and security topics

Using dynamic vascular optical spectroscopy to monitor patients with peripheral arterial disease - three exemplary cases

In this study, Dynamic Vascular Optical Spectroscopy (DVOS) was used to monitor the blood flow in patients affected by peripheral arterial disease (PAD) who underwent lower extremity revascularization procedures. Four different angiosomes on the foot were considered, collecting point-based measurements of the vascular dynamics during a venous cuff occlusion (@ 60 mmHg) in the lower extremity with the system shown in Fig. 1. Over 70 patients were monitored from before the intervention to up to one year later. Among them, we selected 3 exemplary cases that can highlight different hemodynamics flows in the foot of these patients. The general idea behind our research is that if a patient has a healthy vasculature, when we interrupt the venous return using a thigh cuff occlusion the saturation of the blood in the foot will be swifter than in the case of a patient in which its arterial tree is occluded and less blood can pool in the lower extremities. Please click Additional Files below to see the full abstract

Why are psychotic experiences associated with self-injurious thoughts and behaviours? A systematic review and critical appraisal of potential confounding and mediating factors

Psychotic experiences (PEs), including hallucination- and delusion-like experiences, are robustly associated with self-injurious thoughts and behaviours (SITB) in the general population. However, it remains unclear as to why there is an association. The purpose of this systematic review was to elucidate the role of other factors that influence the association between PEs and SITB and, in doing so, highlight potential mechanisms underlying the relationship. A search of electronic international databases was undertaken, including PubMed, PsycINFO and EMBASE, and eligible studies were grouped according to seven confounder categories: sociodemographics, mental disorders, alcohol and substance use, environmental, psychological, intervention and family history/genetic factors. The systematic search strategy identified 41 publications reporting on 1 39 427 participants from 16 different countries. In the majority of studies, where adjustment for other variables occurred, the association between PEs and SITB persisted, suggesting PEs have an independent role. Common mental disorders, psychological distress and negative environmental exposures explained a substantial amount of the variance and therefore need to be considered as potential underlying mechanisms. There was high variability in the variables adjusted for in these studies, and so the question still remains as to whether the association between PEs and self-harm/suicidality can be attributed (fully or in part) to confounding and mediating factors or directly causal mechanisms. Regardless of causality, the now extensive literature reporting an association between these two clinical phenomena supports the broad usefulness of PEs as an indicator of risk for SITB