The economics of online crime

Journal of Economic Perspectives

Volumn 23, Issue 3, 2009, Pages 3-20

  Moore, Tyler ^a   Clayton, Richard ^b   Anderson, Ross ^b  

^a HARVARD UNIVERSITY   (United States)

^b UNIVERSITY OF CAMBRIDGE   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 75749102614     PISSN: None     EISSN: 08953309     Source Type: Journal    
DOI: 10.1257/jep.23.3.3     Document Type: Conference Paper

References (43)

1. Acquisti, Alessandro, Allan Friedman, and Rahul Telang. 2006. "Is There a Cost to Privacy Breaches? An Event Study." Paper presented at the International Conference on Information Systems (ICIS), Milwaukee, WI.
2. Akerlof, George A. 1970. "The Market for 'Lemons': Quality Uncertainty and the Market Mechanism." Quarterly Journal of Economics, 84(3): 488-500.
3. Anderson, Ross. 2001. "Why Information Security is Hard - An Economic Perspective." Proceedings of the 17th Annual Computer Security Applications Conference, 358-365 IEEE Computer Society.
4. Anderson, Ross, Rainer Böhme, Richard Clayton, and Tyler Moore. 2008. "Security Economics and the Internal Market." European Network and Information Security Agency. http://www.enisa.europa.eu/doc/pdf/report-sec-econ-&-int-mark-20080131.pdf.
5. Anderson, Ross, and Tyler Moore. 2006. "The Economics of Information Security." Science, 314(5799): 610-13
6. Anti-phishing Working Group Internet Policy Committee. 2008. "Anti-Phishing Best Practices Recommendations for Registrars." An APWG Industry Advisory. http://www.antiphishing.org/reports/APWG-RegistrarBestPractices.pdf.
7. APACS (Association for Payment Clearing Services). 2007. " Card Fraud Losses Continue to Fall."Press release, March 14. http://www.apacs.org.uk/media-centre/press/07-14-03.html.
8. APACS (Association for Payment Clearing Services). 2008. "APACS Announces Latest Fraud Figures" Press release, September 25. http://www.apacs.org.uk/APACSannounceslatestfraudfigures. htm.
9. Becker, Gary. 1968. "Crime and Punishment: An Economic Approach." The Journal of Political Economy, 76(2): 169-217.
10. California State Senate. 2002. "Assembly Bill No. 700." http://info.sen.ca.gov/pub/01-02/ bill/asm/ab-0651-0700/ab-700-bill-20020929-chaptered.pdf.
11. Camp, L. Jean, and Catherine D. Wolfram. 2004. "Pricing Security: A Market in Vulnerabilities." In Economics of Information Security, Vol.12, Advances in Information Security, ed. L. Jean Camp and Stephen Lewis, 17-34. Boston: Kluwer Academic Publishers.
12. Computer Economics. 2007. "Malware Report: The Economic Impact of Viruses, Spyware, Adware, Botnets, and other Malicious Code." http://www.computereconomics.com/page.cfm?name-Malware%20Report.
13. Day, Oliver, Brandon Palmen, and Rachel Greenstadt. 2008. "Reinterpreting the Disclosure Debate for Web Infections." In Managing Information Risk and the Economics of Security, ed. M. Eric Johnson, 179-197. New York: Springer.
14. The Economist. 2007. "A Walk on the Dark Side." August 30.
15. Franklin, James, Adrian Perrig, Vern Paxon, and Stefan Savage. 2007. "An Inquiry into the Nature and Causes of the Wealth of Internet Miscreants." Proceedings of ACM Conference on Computer and Communications Security (CCS), 375-388. ACM Press.
16. Gartner. 2006. "Gartner Says Number of Phishing E-Mails Sent to U.S. Adults Nearly Doubles in Just Two Years." Press release, November 9. http://www.gartner.com/it/page.jsp?id-498245.
17. Greenemeier. 2007. "T.J. Maxx Parent Company Data The ftIs The Worst Ever." Information Week, March 29. http://www.informationweek.com/news/security/showArticle.jhtml?articleID-198701100.
18. Hirshleifer, Jack. 1983. "From Weakest-link to Best-shot: The Voluntary Provision of Public Goods." Public Choice, 41(3): 371-386.
19. House of Lords Science and Technology Committee. 2007. Personal Internet Security, 5th Report of 2006-2007 London: The Stationery Office.
20. Internet Corporation for Assigned Names and Numbers (ICANN). 2008. "Termination of Registrar EstDomains to Go Ahead." November 12. http://www.icann.org/en/announcements/announcement-12nov08-en.htm.
21. Internet Watch Foundation. 2006. "Half-yearly Report." July. http://www.iwf.org.uk/documents/20060803-2006-bi-annual-report-v7-final4.p
22. Kanich, Chris, Christian Kreibich, Kirill Levchenko, Brandon Enright, Geoffrey M. Voelker, Vern Paxson, Stefan Savage. 2008. "Spamalytics: An Empirical Analysis of Spam Marketing Conversion." Proceedings of ACM Conference on Computer and Communications Security (CCS), 3-14. ACM Press.
23. Krebs, Brian. 2008a. " 'Money Mules' Help Haul Cyber Criminals' Loot." Washington Post. January 25. http://www.washingtonpost.com/wp-dyn/content/story/2008/01/25/ST2008012501460.html.
24. Krebs, Brian. 2008b. "Major Source of Online Scams and Spams Knocked Offline." Blog titled "Security Fix." Washington Post, November 11. http://voices.washingtonpost.com/securityfix/2008/11/major-source-of-online-scams-a.html.
25. Krebs, Brian. 2008c. "EstDomains: A Sordid History and a Storied CEO." Washington Post. September 8. http://voices.washingtonpost.com/securityfix/2008/09/estdomains-rfaut-sordid-history-an.html.
26. Lesk, Michael. 2007. "The New Front Line: Estonia under Cyberassault." IEEE Security and Privacy, 5(4): 76-79.
27. Moore, Tyler. 2008. "How Can We Co-operate to Tackle Phishing?" October 27. http://www.lightbluetouchpaper.org/2008/10/27/how-canweco-operate-to-tackle-phishing/.
28. Moore, Tyler, and Richard Clayton. 2007. "Examining the Impact of Website Take-down on Phishing." Proceedings of the Anti-Phishing Working Group eCrime Researchers Summit, 1-13.
29. Moore, Tyler, and Richard Clayton. 2008a. "The Impact of Incentives on Notice and Takedown." In Managing Information Risk and the Economics of Security, ed. M. Eric Johnson, 199-223. New York: Springer.
30. Moore, Tyler, and Richard Clayton. 2008b. "The Consequence of Non-cooperation in the Fight against Phishing." Proceedings of the AntiPhishing Working Group eCrime Researchers Summit, 1-14. IEEE.
31. Moore, Tyler, and Richard Clayton. 2009. "Evil Searching: Compromise and Recompromise of Internet Hosts for Phishing." Lecture Notes in Computer Science, vol.5628, pp. 256-272
32. Ohm, Paul. 2008. "The Myth of the Superuser: Fear, Risk and Harm Online." UC Davis Law Review, 41(4): 1327-1402.
33. Olson, Eric. 2008. "A Contrary Perspective - Forced Data Sharing Will Decrease Performance and Reduce Protection." October 22. http://www.cyveillanceblog.com/phishing/a-contraryperspective-% e2%80%93-forced-data-sharing-willdecreaseperformance-and-reduce-protection.
34. OpenDNS. 2007. "OpenDNS Shares April 2007 PhishTank Statistics." Press release, May 1. http://www.opendns.com/about/announcements/14/.
35. Panda Security. 2009. "More than 10 Million Worldwide Were Actively Exposed to Identity Theft in 2008." March 10. http://www.pandasecurity.com/usa/homeusers/media/press-releases/viewnews? Noticia-9602&sitepanda-empresas.
36. Provos, Niels, Panayiotis Mavrommatis, Moheeb Abu Rajab, and Fabian Monrose. 2008. "All Your iFRAMEs Point to Us." Proceedings of the 17th USENIX Security Symposium, 1-15. USENIX Association.
37. Romanosky, Sasha, Rahul Telang, and Alessandro Acquisti. 2008. "Do Data Breach Disclosure Laws Reduce Identity Theft?" Paper presented at the 7th Workshop on the Economics of Information Security, Hanover, NH. Available at SSRN: http://ssrn.com/paper-1268926.
38. Schipka, Maksym. 2007. "The Online Shadow Economy: A Billion Dollar Market for Malware Authors". MessageLabs White Paper. http://www.fstc.org/docs/articles/messaglabs-online-shadow-economy.pdf.
39. Sullivan, Bob. 2004. "Experts Fret over Online Extortion Attempts." MSNBC. November, 10. http://www.msnbc.msn.com/id/6436834/.
40. Symantec. 2008. Symatec Global Internet Security Threat Report, Vol.13, Trends for July-December 07. http://eval.symantec.com/mktginfo/enterprise/white-papers/b-whitepaper-internet-security-threat-report-xiii-04-2008.en-us.pdf.
41. Thomas, Rob, and Jerry Martin. 2006. "The Underground Economy: Priceless." USENIX ;login, 31(6): 7-16.
42. van Eeten, Michael J. G., and Johannes M. Bauer. 2008. "The Economics of Malware: Security Decisions, Incentives and Externalities." OECD Science, Technology and Industry Working Paper No. 2008/1.
43. Varian, Hal. 2004. "System Reliability and Free Riding." In Economics of Information Security, Vol.12, Advances in Information Security, ed. L. Jean Camp and Stephen Lewis, 1-15. Boston: Kluwer Academic Publishers.