Wednesday, July 2, 2008

Yahoo and Microsoft deal not over

An AP report (July 2, 2008) cites the Wall Street Journal which mentions that Microsoft is expanding discussions with other media players such as News Corp, and Time Warner in order to create a deal with Yahoo.

According to the report a three party deal would provide Microsoft with Yahoo’s search engine, while the remaining Yahoo businesses would be combined with News Corp’s My Space or Time Warner’s AOL.

Keep in mind Yahoo, Google, and MySpace are already partnering together on standards in the social networking arena with the OpenSocial Foundation (McCarthy,2008), and at one time News Corp considered a swap deal with Yahoo whereby News Corp would give MySpace to Yahoo in return for a 30% controlling interest in the combined new Yahoo business.


References
Associated Press. (2008, July 2). Microsoft and Yahoo rise on deal talks report. Retrieved July 2, 2008 from http://www.forbes.com/feeds/ap/2008/07/02/ap5176971.html

McCarthy, C. (2008, March 25). Yahoo, Google, MySpace form nonprofit OpenSocial Foundation. Retrieved July 2, 2008 from
http://news.cnet.com/8301-13577_3-9902585-36.html

Sabbagh, D. (2007, June 20). News Corp explores swap of MySpace site for Yahoo! Stake. Times Online. Retrieved July 2, 2008 from http://business.timesonline.co.uk/tol/business/industry_sectors/media/article1957867.ece

Tuesday, July 1, 2008

What is the market reaction to security breaches and issues?

In terms of economic impact and market reaction, a 2003 study by Campbell, Gordon, Loeb and Zhou provided evidence to suggest that firms are significantly punished by the stock market only when security issues involve confidential information or unauthorized access to private information such as customer lists, credit card data, and company secrets. If the security issues are of a non-confidential nature such as denial of service attacks, and viruses, then sampling in the study suggests trivial stock market reaction.

The data that was sampled/tested in the study spanned the years 1997-2000 and involved publicly disclosed security incidents that were reported in either the Wall Street Journal, New York Times, Washington Post, USA Today, or Financial Times.

I wonder if data samples from 2000-2007 would remain in-line with previous empirical findings, or if revenues/sales were impacted versus just the stock price?

Reference
Campbell, K., Gordon, L., Loeb, M. & Zhou, L. (2003). The economic cost of publicly announced information security breaches: empirical evidence from the stock market. Journal of Computer Security, 11(3). Retrieved July 1, 2008 from Academic Search Premier

Security related links and resources

2007 E-Crime Watch Survey. (2007, September 11). Retrieved July 1, 2008 from http://www2.csoonline.com/info/release.html?CID=33168

About CSD: The computer security division. (2007, September 17). Retrieved November 25, 2007 from http://csrc.nist.gov/about/index.html

Epps, D., Tanner, S. & Silva, C. (2006). Can VoIP secure itself for the next technology wave? Information Systems Security, 15(2). Retrieved November 23, 2007 from Academic Search Premier.

Kuhn, R., Walsh, T. & Fries, S. (2005, January). Security considerations for voice over IP systems: Recommendations of the National Institute of Standards and Technology. Retrieved from http://csrc.nist.gov/publications/nistpubs/800-58/SP800-58-final.pdf

Leibfried, R. (2006). Securing internet protocol telephony. Retrieved October 24, 2007 from http://www.verizonbusiness.com/us/resources/data/securingvoip.pdf

Linask, E. (2006, May 23). Bulletproof VoIP security for SIP softphone users. Retrieved November 21, 2007 from http://voipforsmb.tmcnet.com/news/articles/1285-bulletproof-voip-security-sip-softphone-users.htm

Orans, L. (2005, June 28). A taxonomy for security threats to VoIP environments. Retrieved November 18, 2007 from Gartner.

Plewes, A. (2007, March 22). The biggest VoIP security threats - and how to stop them. Retrieved November 18, 2007 from http://www.silicon.com/research/specialreports/voipsecurity/0,3800013656,39166479,00.htm

Richardson, R. (2007). 2007 CSI Computer crime and security survey. Retrieved November 25, 2007 from http://i.cmpnet.com/v2.gocsi.com/pdf/CSISurvey2007.pdf

SANS Top 20 2007 security risks. (2007). Retrieved November 25, 2007 from http://www.sans.org/top20/#n1

Softphone (2005, February 9). Retrieved November 19, 2007 from http://searchvoip.techtarget.com/sDefinition/0,,sid66_gci1048895,00.html

VoIP Security Alliance. (2005, October 24). VoIP security and privacy threat taxonomy (Public Release 1.0). Retrieved November 18, 2007 from http://www.voipsa.org/Activities/VOIPSA_Threat_Taxonomy_0.1.pdf

ZDNet definition for softphone. (n.d.). Retrieved November 19, 2007 from http://dictionary.zdnet.com/definition/softphone.html