Income, interdependence, and substitution effects affecting incentives for security investment

Journal of Accounting and Public Policy

Volumn 25, Issue 6, 2006, Pages 629-665

  Hausken, Kjell ^a  

^a UNIVERSITY OF STAVANGER   (Norway)

Author keywords

Conflict; Contest success function; Cyber war; Income; Interdependence; Security breaches; Security technology investment; Substitution

Indexed keywords

EID: 33751256271     PISSN: 02784254     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.jaccpubpol.2006.09.001     Document Type: Article

References (37)

1. Anderson, R., 2001. Why information security is hard: An economic perspective. In: Proceedings of 17th Annual Computer Security Applications Conference, December.
2. Arrow K.J., Harris T., and Marschak J. Optimal inventory policy. Econometrica 19 (1951) 250-272
3. Bagby J. The Confluence of Public Policy on Information Security Controls (2005), Pennsylvania State University
4. Campbell K., Gordon L., Loeb M., and Zhou L. The economic cost of publicly announced information security breaches: empirical evidence from the stock market. Journal of Computer Security 11 3 (2003) 431-448
5. Cavusoglu H., Mishra B., and Raghunathan S. The effect of internet security breach announcements on shareholder wealth. International Journal of Electronic Commerce 9 1 (2004) 69
6. Dalvi, N., Domingos, P., Mausam, M., Sanghai, S., Verma, D., 2004. Adversarial classification. In: Proceedings of the 2004 ACM SIGKDD International Conference on Knowledge Discovery and Data Mining Table of Contents, Seattle, WA, USA, pp 99-108, ISBN:1-58113-888-9.
7. Dhillon G., Silva L., and Backhouse J. Computer crime at CEFORMA: a case study. International Journal of Information Management 24 (2004) 551-561
8. Enders, W., Sandler, T., 2003. What do we know about the substitution effect in transnational terrorism? In: Silke, A., Ilardi, G. (Eds.), Researching Terrorism: Trends, Achievements, Failures, Frank Cass, Ilfords, UK.
9. Gal-Or E. Information sharing in oligopoly. Econometrica 53 2 (1985) 329-343
10. Gal-Or, E., Ghose, A., 2003. The economic consequences of sharing security information. In: Proceedings of the Second Workshop on Economics and Information Security, May 29-30, University of Maryland.
11. Gal-Or E., and Ghose A. The economic incentives for sharing security information. Information Systems Research 16 2 (2005) 186-208
12. Gordon L.A., and Loeb M. Using information security as a response to competitor analysis systems. Communications of the ACM 44 9 (2001) 70-75
13. Gordon L.A., and Loeb M. The economics of information security investment. ACM Transactions on Information and System Security 5 4 (2002) 438-457
14. Gordon L.A., and Loeb M. Expenditures on competitor analysis and information security: a managerial accounting perspective. In: Bhimani A. (Ed). Management Accounting in the New Economy (2003), Oxford University Press 95-111
15. Gordon L.A., Loeb M., and Lucyshyn W. Sharing information on computer systems security: an economic analysis. Journal of Accounting and Public Policy 22 6 (2003) 461-485
16. Hausken K. Probabilistic risk analysis and game theory. Risk Analysis 22 1 (2002) 17-27
17. Hausken K. Production and conflict models versus rent seeking models. Public Choice 123 (2005) 59-93
18. Hausken, K., 2006. Returns to information security investment: The effect of alternative information security breach functions on optimal investment and sensitivity to vulnerability. Information Systems Frontiers 8(5), in press.
19. Hirshleifer J. Conflict and rent-seeking success functions: ratio vs. difference models of relative success. Public Choice 63 (1989) 101-112
20. Howard, J., 1997. Analysis of security incidents on the Internet. Unpublished Doctoral Dissertation, Carnegie Mellon University. Available from .
21. Keohane N., and Zeckhauser R.J. The ecology of terror defense. The Journal of Risk and Uncertainty 26 2/3 (2003) 201-229
22. Kirby A. Trade associations as information exchange mechanisms. RAND Journal of Economics 29 1 (1988) 138-146
23. Kjaerland M. A classification of computer security incidents based on reported attack data. Journal of Investigative Psychology and Offender Profiling 2 2 (2005) 105-120
24. Kunreuther H., and Heal G. Interdependent security. The Journal of Risk and Uncertainty 26 2/3 (2003) 231-249
25. Lakdawalla, D., Zanjani, G., 2002. Insurance, self-protection, and the economics of terrorism. RAND and NBER, Federal Reserve Bank of New York.
26. Novshek W., and Sonnenschein H. Fulfilled expectations in cournot duopoly with information acquisition and release. Bell Journal of Economics 13 1 (1982) 214-218
27. Porter M. Competitive Strategy: Techniques for Analyzing Industries and their Competitors (1980), Free Press, New York, NY
28. Schechter, S., Smith, M., 2003. How much security is enough to stop a thief? In: Proceedings of the Financial Cryptography Conference, Guadeloupe, January.
29. Schenk M., and Schenk M. Defining the value of strategic security. Secure Business Quarterly 1 1 (2002) 1-6
30. Shapiro C. Exchange of cost information in oligopoly. Review of Economic Studies 53 3 (1986) 433-446
31. Skaperdas S. Conflict and attitudes toward risk. American Economic Review 81 (1991) 116-120
32. Skaperdas S. Contest success functions. Economic Theory 7 (1996) 283-290
33. Tanaka, H., Matsuura, K., 2005. Vulnerability and effects of information security investment: a firm level empirical analysis of Japan. Presented May 26, 2005 at the University of Maryland Forum: "Financial Information Systems and Cyber Security: A Public Policy Perspective".
34. Tanaka H., Matsuura K., and Sudoh O. Vulnerability and information security investment: an empirical analysis of E-local government in Japan. Journal of Accounting and Public Policy 24 (2005) 37-59
35. Varian, H., 2002. System reliability and free riding. In: Proceedings of the First Workshop on Economics and Information Security, May 16-17, University of California, Berkeley.
36. Vives X. Trade association disclosure rules, incentives to share information, and welfare. RAND Journal of Economics 21 3 (1990) 409-430
37. Ziv A. Information sharing in oligopoly: the truth-telling problem. RAND Journal of Economics 24 3 (1993) 455-465