How much security is enough to stop a thief? The economics of outsider theft via computer systems and networks

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 2742, Issue , 2003, Pages 122-137

  Schechter, Stuart E ^a   Smith, Michael D ^a  

^a HARVARD UNIVERSITY   (United States)

Author keywords

Exploits; Security Economics; Theft; Threat Models

Indexed keywords

CRIME;

EXPLOITS; PACKAGED SYSTEMS; SECURITY ECONOMICS; SINGLE VULNERABILITIES; THEFT; THREAT MODELS;

NETWORK SECURITY;

EID: 35248853499     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-45126-6_9     Document Type: Article

References (16)

1. Schechter, S.E.: Quantitatively differentiating system security. In: The First Workshop on Economics and Information Security. (2002)
2. Young, A., Yung, M.: Cryptovirology: Extortion-based security threats and countermeasures. In: Proceedings of the IEEE Symposium on Security and Privacy. (1996) 129-140
3. Counterpane Internet Security, Lloyd's of London: Counterpane Internet Security announces industry's first broad insurance coverage backed by Lloyd's of London for e-commerce and Internet security. http://www.counterpane.com/pr-lloyds.html (2000)
4. The Honeynet Project: Know Your Enemy: Revealing the Security Tools, Tactics, and Motives of the Blackhat Community. Addison-Wesley (2001)
5. Becker, G.S.: Crime and punishment: An economic approach. The Journal of Political Economy 76 (1968) 169-217
6. Ehrlich, I.: Participation in illegitimate activities: A theoretical and empirical investigation. The Journal of Political Economy 81 (1973) 521-565
7. Ehrlich, I.: Crime, punishment, and the market for offenses. The Journal of Economic Perspectives 10 (1996) 43-67
8. Gordon, L.A., Loeb, M.P., Lucyshyn, W.: An economics perspective on the sharing of information related to security breaches: Concepts and empirical evidence. In: The First Workshop on Economics and Information Security. (2002)
9. Goldberg, I., Nold, F.C.: Does reporting deter burglars? - an empirical analysis of risk and return in crime. The Review of Economics and Statistics 62 (1980) 424-431
10. Anderson, R.J.: Why information security is hard, an economic perspective. In: 17th Annual Computer Security Applications Conference. (2001)
11. Gordon, L.A., Loeb, M.P.: The economics of information security investment. ACM Transactions on Information and System Security 5 (2002) 438-457
12. Varian, H.R.: System reliability and free riding. In: The First Workshop on Economics and Information Security. (2002)
13. Beattie, S., Arnold, S., Cowan, C., Wagle, P., Wright, C.: Timing the application of security patches for optimal uptime. In: Proceedings of LISA '02: 16th Systems Administration Conference. (2002)
14. Rescorla, E.: Security holes... who cares? http://www.rtfm.com/upgrade.pdf (2002)
15. Schechter, S.E.: How to buy better testing: Using competition to get the most security and robustness for your dollar. In: Proceedings of the Infrastructure Security Conference. (2002)
16. Camp, L.J., Wolfram, C.: Pricing security. In: Proceedings of the CERT Information Survivability Workshop. (2000) 31-39