Empirical analysis of the effects of cyber security incidents

Risk Analysis

Volumn 29, Issue 9, 2009, Pages 1304-1316

  Davis, Ginger ^a   Garcia, Alfredo ^a   Zhang, Weide ^a  

^a UNIVERSITY OF VIRGINIA   (United States)

Author keywords

Breach; Security incident; Security policy; Structural change

Indexed keywords

BREACH; BUSINESS RISKS; CYBER SECURITY; EMPIRICAL ANALYSIS; ON-LINE SERVICE; ONLINE BUSINESS; ONLINE CHANNELS; ONLINE CUSTOMERS; SECURITY INCIDENT; SECURITY POLICY; STRUCTURAL CHANGE; WEB TRAFFIC;

SECURITY OF DATA; SECURITY SYSTEMS; TIME SERIES; WORLD WIDE WEB;

PUBLIC POLICY;

BUSINESS; EMPIRICAL ANALYSIS; INTERNET; POLICY ANALYSIS; SECURITY THREAT; TESTING METHOD; TIME SERIES;

ARTICLE; COMMERCIAL PHENOMENA; DYNAMICS; EMPIRICAL RESEARCH; INFORMATION SERVICE; INTERNET; ORGANIZATION AND MANAGEMENT; POLICY; RISK ASSESSMENT; WEB BROWSER;

EMPIRICAL RESEARCH; INFORMATION SYSTEMS; INTERNET; MODELS, THEORETICAL; SECURITY MEASURES;

EID: 69049088859     PISSN: 02724332     EISSN: 15396924     Source Type: Journal    
DOI: 10.1111/j.1539-6924.2009.01245.x     Document Type: Article

References (17)

1. Kark K, Penn J, Atwood C, Albornoz J. The State of Information Security Spending. Cambridge, MA : Forrester Research Inc., 2006. Available at http://www.forrester.com/Research/Document/Excerpt/0,7211,40317,00.html, Accessed on November 1, 2007.
2. Campbell K, Gordon L, Loeb M, Zhou L. The economic cost of publicly announced information security breaches: Empirical evidence from the stock market. Journal of Computer Security, 2003 11 (3 431 448.
3. Cavusoglu H, Mishra B, Raghunathan S. The effect of Internet security breach announcements on market value: Capital market reactions for breached firms and Internet security developers. International Journal of Electronic Commerce, 2004 9 (1 70 104.
4. Goldfarb A. The medium-term effects of unavailability. Quantitative Marketing and Economics, 2006 4 (2 143 171.
5. Acquisti A, Friedman A, Telang R. Is there a cost to privacy breaches? An event study. Fifth Workshop on the Economics of Information Security, Cambridge, UK, 2006. Available at http://weis2006.econinfosec.org/docs/40.pdf, Accessed December 21, 2007.
6. Andrijcic E, Horowitz B. A macro-economic framework for evaluation of cyber security risks related to protection of intellectual property. Risk Analysis, 2006 26 (4 907 923.
7. Romanosky S, Telang R, Acquisti A. Do data breach disclosure laws reduce identity theft WEIS 2008 - Seventh Workshop on Economics of Information Security, Hanover, NH, June 25-28 2008.
8. Goldfarb A. Why do denial of service attacks reduce future visits? Switching costs vs. changing preferences. Fourth Workshop on the Economics of Information Security, 2005, Cambridge, MA. Available at http://infosecon.net/ workshop/pdf/6.pdf.
9. Chow GC. Tests of equality between sets of coefficients in two linear regressions. Econometrica, 1960 28 : 591 605.
10. Chen P, Hitt L. Measuring switching costs and their determinants in Internet enabled businesses: A study of the online brokerage industry. Information Systems Research, 2002 13 (3 255 276.
11. Camp LJ. Reliable, usable signaling to defeat masquerade attacks. Fifth Workshop on the Economics of Information Security, 2006, Cambridge, UK. Available at http://weis2006.econinfosec.org/docs/48.pdf, Accessed December 21, 2007.
12. Livingston J. How valuable is a good reputation? A sample selection model of Internet auctions. Review of Economics and Statistics, 2005 87 (3 453 465.
13. Fich R, Fich E. Effects of web traffic announcements on firm value. International Journal of Electronic Commerce, 2004 8 (4 161 181.
14. Wang J, Zivot E. A Bayesian time series model of multiple structural changes in level, trend, and variance. Journal of Business and Economic Statistics, 2000 18 (3 374 386.
15. Yao Y-C. Estimating the number of change points via Schwarz' criterion. Statistics and Probability Letters, 1988 6 : 181 189.
16. Gordon LA. Incentives for improving cybersecurity in the private sector: A cost-benefit perspective. Testimony for the House Committee on Homeland Security's Subcommittee on Emerging Threats, Cybersecurity, and Science and Technology, October 31, 2007. Available at http://homeland.house.gov// SiteDocuments/20071031155020-22632.pdf.
17. Gordon LA, Loeb MP. The economics of information security investment. ACM Transactions on Information and System Security, 2002 5 (4 438 457.