Challenges, collaborative interactions, and diagnosis performed by IT security practitioners : an empirical study