Risk homeostasis in information security:challenges in confirming existence and verifying impact

The central premise behind risk homeostasis theory is that humans adapt their behaviors, based on external factors, to align with a personal risk tolerance level. In essence, this means that the safer or more secure they feel, the more likely it is that they will behave in a risky manner. If this effect exists, it serves to restrict the ability of risk mitigation techniques to effect improvements.The concept is hotly debated in the safety area. Some authors agree that the effect exists, but also point out that it is poorly understood and unreliably predicted. Other re-searchers consider the entire concept fallacious. It is important to gain clarity about whether the effect exists, and to gauge its impact if such evidence can indeed be found.In this paper we consider risk homeostasis in the context of information security. Similar to the safety area, information security could well be impaired if a risk homeostasis effect neutralizes the potential benefits of risk mitigation measures. If the risk homeostasis effect does indeed exist and does impact risk-related behaviors, people will simply elevate risky behaviors in response to feeling less vulnerable due to following security procedures and using protective technologies.Here we discuss, in particular, the challenges we face in confirming the existence and impact of the risk homeostasis effect in information security, especially in an era of ethical research practice

“This is the way ‘I’ create my passwords ...":does the endowment effect deter people from changing the way they create their passwords?

The endowment effect is the term used to describe a phenomenon that manifests as a reluctance to relinquish owned artifacts, even when a viable or better substitute is offered. It has been confirmed by multiple studies when it comes to ownership of physical artifacts. If computer users also "own", and are attached to, their personal security routines, such feelings could conceivably activate the same endowment effect. This would, in turn, lead to their over-estimating the \value" of their existing routines, in terms of the protection they afford, and the risks they mitigate. They might well, as a consequence, not countenance any efforts to persuade them to adopt a more secure routine, because their comparison of pre-existing and proposed new routine is skewed by the activation of the endowment effect.In this paper, we report on an investigation into the possibility that the endowment effect activates when people adopt personal password creation routines. We did indeed find evidence that the endowment effect is likely to be triggered in this context. This constitutes one explanation for the failure of many security awareness drives to improve password strength. We conclude by suggesting directions for future research to confirm our findings, and to investigate the activation of the effect for other security routines

Prospective multicentre cohort study of heparin-induced thrombocytopenia in acute ischaemic stroke patients

Acute ischaemic stroke patients sometimes receive heparin for treatment and/or prophylaxis of thromboembolic complications. This study was designed to elucidate the incidence and clinical features of heparin-induced thrombocytopenia (HIT) in acute stroke patients treated with heparin. We conducted a prospective multicentre cohort study of 267 patients who were admitted to three stroke centres within 7 d after stroke onset. We examined clinical data until discharge and collected blood samples on days 1 and 14 of hospitalization to test anti-platelet factor 4/heparin antibodies (anti-PF4/H Abs) using an enzyme-linked immunosorbent assay (ELISA); platelet-activating antibodies were identified by serotonin-release assay (SRA). Patients with a 4Ts score ≥4 points, positive-ELISA, and positive-SRA were diagnosed as definite HIT. Heparin was administered to 172 patients (64·4%: heparin group). Anti-PF4/H Abs were detected by ELISA in 22 cases (12·8%) in the heparin group. Seven patients had 4Ts ≥ 4 points. Among them, three patients (1·7% overall) were also positive by both ELISA and SRA. National Institutes of Health Stroke Scale score on admission was high (range, 16–23) and in-hospital mortality was very high (66·7%) in definite HIT patients. In this study, the incidence of definite HIT in acute ischaemic stroke patients treated with heparin was 1·7% (95% confidence interval: 0·4–5·0). The clinical severity and outcome of definite HIT were unfavourable

Редкие металлы в космической технике

В данной статье рассматривается применение редких металлов в космической технологии. Такжев статье описана классификация редких металлов, уникальные свойства и место каждой группыэлементов в конструировании комических аппаратов.Im vorliegenden Artikel wird die Verwendung von seltenen Metallen in der Raumfahrttechnik betrachtet.Der Artikel beschreibt auch die Klassifizierung von seltenen Metallen, die unikalen Eigenschaften jeder Gruppe undderen Funktion bei der Konstruktion von kosmischen Geräten

Egg clutch dehydration induces early hatching in red-eyed treefrogs, Agalychnis callidryas

Terrestrial eggs have evolved repeatedly in tropical anurans exposing embryos to the new threat of dehydration. Red-eyed treefrogs, Agalychnis callidryas, lay eggs on plants over water. Maternally provided water allows shaded eggs in humid sites to develop to hatching without rainfall, but unshaded eggs and those in less humid sites can die from dehydration. Hatching responses of amphibian eggs to dry conditions are known from two lineages with independent origins of terrestrial eggs. Here, we experimentally tested for dehydration-induced early hatching in another lineage (Agalychnis callidryas, Phyllomedusidae), representing a third independent origin of terrestrial eggs. We also investigated how dehydration affected egg and clutch structure, and egg mortality. We collected clutches from a pond in Gamboa, Panama, and randomly allocated them to wet or dry treatments at age 1 day. Embryos hatched earlier from dry clutches than from wet clutches, accelerating hatching by ∼11%. Clutch thickness and egg diameter were affected by dehydration, diverging between treatments over time. Meanwhile, mortality in dry clutches was six-fold higher than in control clutches. With this study, early hatching responses to escape mortality from egg dehydration are now known from three anuran lineages with independent origins of terrestrial eggs, suggesting they may be widespread. Further studies are needed to understand how terrestrial amphibian eggs can respond to, or will be affected by, rapid changes in climate over the next decades.Fil: Salica, María José. Universidad Nacional de Jujuy. Facultad de Ciencias Agrarias. Instituto de Ecorregiones Andinas. Consejo Nacional de Investigaciones Científicas y Técnicas. Centro Científico Tecnológico CONICET - Salta. San Salvador de Jujuy; ArgentinaFil: Vonesh, James R.. Virginia Commonwealth University; Estados UnidosFil: Warkentin, Karen M.. Smithsonian Tropical Research Institute; Panamá. Boston University; Estados Unido

Are we predisposed to behave securely? Influence of risk disposition on individual security behaviors

Employees continue to be the weak link in organizational security management and efforts to improve the security of employee behaviors have not been as effective as hoped. Researchers contend that security-related decision making is primarily based on risk perception. There is also a belief that, if changed, this could improve security-related compliance. The extant research has primarily focused on applying theories that assume rational decision making e.g. protection motivation and deterrence theories. This work presumes we can influence employees towards compliance with information security policies and by means of fear appeals and threatened sanctions. However, it is now becoming clear that security-related decision making is complex and nuanced, not a simple carrot- and stick-related situation. Dispositional and situational factors interact and interplay to influence security decisions. In this paper, we present a model that positions psychological disposition of individuals in terms of risk tolerance vs. risk aversion and proposes research to explore how this factor influences security behaviors. We propose a model that acknowledges the impact of employees' individual dispositional risk propensity as well as their situational risk perceptions on security-related decisions. It is crucial to understand this decision-making phenomenon as a foundation for designing effective interventions to reduce such risk taking. We conclude by offering suggestions for further research.</p

Is the responsibilization of the cyber security risk reasonable and judicious?

Cyber criminals appear to be plying their trade without much hindrance. Home computer users are particularly vulnerable to attack by an increasingly sophisticated and globally dispersed hacker group. The smartphone era has exacerbated the situation, offering hackers even more attack surfaces to exploit. It might not be entirely coincidental that cyber crime has mushroomed in parallel with governments pursuing a neoliberalist agenda. This agenda has a strong drive towards individualizing risk i.e. advising citizens how to take care of themselves, and then leaving them to face the consequences if they choose not to follow the advice. In effect, citizens are “responsibilized .” Whereas responsibilization is effective for some risks, the responsibilization of cyber security is, we believe, contributing to the global success of cyber attacks. There is, consequently, a case to be made for governments taking a more active role than the mere provision of advice, which is the case in many countries. We conclude with a concrete proposal for a risk regulation regime that would more effectively mitigate and ameliorate cyber risk

scream

so Human They say eeri