How Much Security Is Enough to Stop a Thief?: The Economics of Outsider Theft via Computer Systems and Networks

No abstract is available for this paper.

• Publication year

  2003

• Venue

  Financial Cryptography

• Publication date

  2003-01-27

• Fields of study

  Business, Computer Science, Economics

• Identifiers
  DOI 10.1007/978-3-540-45126-6_9
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• System Reliability and Free Riding

  2004cited by this paper
• Security Holes . . . Who Cares?

  2003cited by this paper
• The economics of information security investment

  2002cited by this paper
• Timing the Application of Security Patches for Optimal Uptime

  2002cited by this paper
• An Economics Perspective on the Sharing of Information Related to Security Breaches: Concepts and Empirical Evidence

  2002cited by this paper
• Quantitatively Differentiating System Security

  2002cited by this paper
• Why information security is hard - an economic perspective

  2001cited by this paper
• Honeynet Phase Two: Knowing Your Enemy More

  2001cited by this paper
• Who cares?

  2000cited by this paper
• Pricing Security

  2000cited by this paper
• Cryptovirology: extortion-based security threats and countermeasures

  1996cited by this paper
• Crime, Punishment, and the Market for Offenses

  1996cited by this paper
• Does Reporting Deter Burglars?-An Empirical Analysis of Risk and Return in Crime

  1980cited by this paper
• Participation in Illegitimate Activities: A Theoretical and Empirical Investigation

  1973cited by this paper

• A Model of Information Security and Competition

  2024cites this paper
• On DevSecOps and Risk Management in Critical Infrastructures: Practitioners’ Insights on Needs and Goals

  2024cites this paper
• A fuzzy group decision-making framework for computer network security evaluation with probabilistic linguistic information

  2023cites this paper
• Is Cybersecurity Risk Factor Disclosure Informative? Evidence from Disclosures Following a Data Breach

  2021cites this paper
• Information Segmentation and Investing in Cybersecurity

  2021cites this paper
• Cyber Threat Information Sharing: Perceived Benefits and Barriers

  2019cites this paper
• Analysis of Information Security News Content and Abnormal Returns of Enterprises

  2019cites this paper
• New Game-Theoretic Analysis of DDoS Attacks Against Bitcoin Mining Pools with Defence Cost

  2019cites this paper
• Cyber-Insurance for Cyber-Physical Systems

  2018cites this paper
• Cybermetrics 2016: DDos en malware

  2017cites this paper
• On the Economics of Ransomware

  2017cites this paper
• Optimal risk management in critical infrastructures against cyber-adversaries

  2017cites this paper
• Security Standardization for Social Welfare in the Presence of Unverifiable Control

  2017cites this paper
• On Ransomware and Envisioning the Enemy of Tomorrow

  2017cites this paper
• Effects of Team Collaboration on Sharing Information Security Advice: Insights from Network Analysis

  2017cites this paper
• Mandatory Standards and Organizational Information Security

  2016cites this paper
• Phishing: An economic analysis of cybercrime perpetrators

  2016cites this paper
• A case for the economics of secure software development

  2016cites this paper
• Market based models for cybersecurity information exchange (CYBEX)

  2016cites this paper
• Establishing evolutionary game models for CYBer security information EXchange (CYBEX)

  2016cites this paper
• Quantification and Assessment Method for a Company's Product Piracy Risks

  2015cites this paper
• The impact of information sharing on cybersecurity underinvestment: A real options perspective

  2015cites this paper
• Game Theoretic Modeling to Enforce Security Information Sharing among Firms

  2015cites this paper
• Networks of Cybercrime Prevention: A Process Study of the Credit Card

  2015influential citation
• White or Black Hat? An Economic Analysis of Computer Hacking

  2015cites this paper
• When Bitcoin Mining Pools Run Dry - A Game-Theoretic Analysis of the Long-Term Impact of Attacks Between Mining Pools

  2015cites this paper
• An Agent-Based Model of Insurance and Protection Decisions on IT Systems

  2015cites this paper
• Games of Timing for Security in Dynamic Environments

  2015cites this paper
• The Application of AHP to Evaluate Information Security Policy Decision Making

  2014cites this paper
• Network externality and incentive to invest in network security

  2014cites this paper
• Game-Theoretic Analysis of DDoS Attacks Against Bitcoin Mining Pools

  2014cites this paper
• A roadmap towards improving managed security services from a privacy perspective

  2014cites this paper
• Small World: Collisions Among Attackers in a Finite Population

  2013cites this paper
• The economic impact of cyber terrorism

  2013cites this paper
• Privacy handling for critical information infrastructures

  2013cites this paper
• The Textual Contents of Media Reports of Information Security Breaches and Profitable Short-Term Investment Opportunities

  2013cites this paper
• Who Can We Trust?: The Economic Impact of Insider Threats

  2013cites this paper
• Data survivability vs. security in information systems

  2012cites this paper
• Why do Nigerian Scammers Say They are From Nigeria?

  2012cites this paper
• Ryzyko informatyczne w działalności bankowej

  2012cites this paper
• Implementation of the OCTAVE Methodology in Security Risk Management Process for Business Resources

  2012cites this paper
• Growth and Sustainability of MSSP Networks

  2012cites this paper
• Where Do All the Attacks Go?

  2011cites this paper
• A signal game model on security defense of information system

  2011cites this paper
• Security Standardization in the Presence of Unverifiable Control

  2011cites this paper
• STRATEGIC INFORMATION SECURITY DECISION MAKING WITH ANALYTIC HIERARCHY PROCESS

  2011cites this paper
• A Survey of Consumer Information Privacy from the Accounting Information Systems Perspective

  2011cites this paper
• Notice of Violation of IEEE Publication PrinciplesApplication of AHP to support information security decision making in case of Indian e-government systems

  2011cites this paper
• Optimal IS Security Investment: Cyber Terrorism vs. Common Hacking

  2011cites this paper
• Market Value of Voluntary Disclosures Concerning Information Security

  2010cites this paper
• The Use of AHP in Security Policy Decision Making: An Open Office Calc Application

  2010cites this paper
• When Information Improves Information Security

  2010cites this paper
• Quantitative software security measurement in an engineering service bus platform

  2010cites this paper
• Security protection design for deception and real system regimes: A model and analysis

  2010cites this paper
• An Empirical Analysis of Software Vendors' Patch Release Behavior: Impact of Vulnerability Disclosure

  2010cites this paper
• When Information Improves Information Security (Short Paper)

  2010cites this paper
• Blue versus Red: Towards a Model of Distributed Security Attacks

  2009cites this paper
• Risks and Benefits of Signaling Information System Characteristics to Strategic Attackers

  2009influential citation
• Valuing the flexibility of investing in security process innovations

  2009cites this paper
• Choice and Chance: A Conceptual Model of Paths to Information Security Compromise

  2009cites this paper
• Social Embeddedness and Sharing Security Information: Bridging the Cost Benefit Gap

  2009cites this paper
• How to secure supply chains against counterfeit products using low-cost RFID

  2009influential citation
• Information Security: User Precautions, Attacker Efforts, and Enforcement

  2009cites this paper
• The Application of AHP Model to Guide Decision Makers: A Case Study of E-banking Security

  2009cites this paper
• Information Security Policy Decision Making: An Analytic Hierarchy Process Approach

  2009cites this paper
• Hierarchical, model-based risk management of critical infrastructures

  2009cites this paper
• Securing RFID Systems by Detecting Tag Cloning

  2009cites this paper
• Research Note - A Value-at-Risk Approach to Information Security Investment

  2008cites this paper
• Decision-Theoretic and Game-Theoretic Approaches to IT Security Investment

  2008cites this paper
• Optimal Policy for Software Vulnerability Disclosure

  2008cites this paper
• Threat Modelling in EPC-based Information Sharing Networks

  2008cites this paper
• How Many Attackers Can Selfish Defenders Catch?

  2008cites this paper
• Distributed attacks as security games

  2008cites this paper
• ACQUISITION AND DIFFUSION OF TECHNOLOGY INNOVATION

  2008cites this paper
• A probabilistic model for optimal insurance contracts against security risks and privacy violation in IT outsourcing environments

  2007cites this paper
• A Threat Model Analysis of EPC-based Information Sharing Networks

  2007cites this paper
• Information sharing among firms and cyber attacks

  2007cites this paper
• An examination of private intermediaries’ roles in software vulnerabilities disclosure

  2007cites this paper
• The Economics of Information Security

  2006cites this paper
• On the Limits of Cyber-Insurance

  2006cites this paper
• Understanding and Influencing Attackers' Decisions: Implications for Security Investment Strategies

  2006influential citation
• Assessing the Risk of an Information Infrastructure Through Security Dependencies

  2006cites this paper
• On Software Diversification, Correlated Failures and Risk Management

  2006cites this paper
• Does information security attack frequency increase with vulnerability disclosure? An empirical analysis

  2006cites this paper
• An Empirical Analysis of Software Vendors' Patching Behavior: Impact of Vulnerability Disclosure

  2006cites this paper
• Income, interdependence, and substitution effects affecting incentives for security investment

  2006cites this paper
• Cryptoviral extortion using Microsoft's Crypto API

  2006cites this paper
• Building a Cryptovirus Using Microsoft's Cryptographic API

  2005cites this paper
• Malicious Cryptography: Cryptovirology and Kleptography

  2005cites this paper
• Toward a threat model for storage systems

  2005influential citation
• Cost Tradeoffs for Information Security Assurance

  2005cites this paper
• Economics of software vulnerability disclosure

  2005cites this paper
• An Empirical Analysis of Vendor Response to Software Vulnerability Disclosure

  2005cites this paper
• The Economic Incentives for Sharing Security Information

  2005cites this paper
• An Extreme Value Approach to Information Technology Security Investment

  2005cites this paper
• Market for Software Vulnerabilities? Think Again

  2005cites this paper
• Malicious cryptography - exposing cryptovirology

  2004cites this paper
• What Price Privacy? - and why identity theft is about neither identity nor theft

  2004cites this paper
• Impact of Vulnerability Disclosure and Patch Availability - An Empirical Analysis

  2004cites this paper
• Computer security strength and risk: a quantitative approach

  2004cites this paper