Competition and patching of security vulnerabilities: An empirical analysis

Information Economics and Policy

Volumn 22, Issue 2, 2010, Pages 164-177

  Arora, Ashish ^a   Forman, Chris ^b   Nandkumar, Anand ^c   Telang, Rahul ^d  

^a DUKE UNIVERSITY   (United States)

^b GEORGIA INSTITUTE OF TECHNOLOGY   (United States)

^c INDIAN SCHOOL OF BUSINESS   (India)

^d CARNEGIE MELLON UNIVERSITY   (United States)

Author keywords

Competition; Information security; Software quality; Vulnerabilities

Indexed keywords

COMPETITION EFFECTS; COMPETITION INFORMATION; EMPIRICAL ANALYSIS; INDIRECT EFFECTS; MARKET SHARE; PRODUCT MARKETS; PRODUCT QUALITY; SECURITY VULNERABILITIES; SOFTWARE DEFECTS; SOFTWARE MARKETS;

COMMERCE; COMPETITION; NETWORK SECURITY;

COMPUTER SOFTWARE SELECTION AND EVALUATION;

COMMODITY MARKET; COMPETITION (ECONOMICS); COMPETITIVENESS; EMPIRICAL ANALYSIS; ESTIMATION METHOD; MARKET SYSTEM; QUALITATIVE ANALYSIS; SECURITY; SOFTWARE; TIME SERIES ANALYSIS;

EID: 77649179868     PISSN: 01676245     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.infoecopol.2009.10.002     Document Type: Article

References (44)

1. Agarwal M., and Chari K. Software effort, quality, and cycle time: a study of CMM level 5 projects. IEEE Transactions on Software Engineering 33 (2007) 145-156
2. Arbaugh W.A., Fithen W.L., and McHugh J. Windows of vulnerability: a case study analysis. IEEE Computer 33 12 (2000) 52-59
3. Arora A., Caulkins J., and Telang R. Sell first, fix later: impact of patching on software quality. Management Science 52 3 (2006) 465-471
4. Arora A., Nandkumar A., and Telang R. Impact of patches and software vulnerability information on frequency of security attacks - an empirical analysis. Information Systems Frontiers 8 5 (2006) 350-362
5. Arora A., Telang R., and Xu H. Optimal policy for software vulnerability disclosure. Management Science 54 4 (2008) 642-656
6. Arora, A., Krishnan, R., Telang, R., Yang, Y., forthcoming. An empirical analysis of software vendors' patch release behavior: impact of vulnerability disclosure. Information Systems Research.
7. Baltagi B.H. Econometric Analysis of Panel Data (1995), Wiley, New York
8. Banker R., and Kauffman R. Reuse and productivity in integrated computer-aided software engineering: an empirical study. MIS Quarterly 15 3 (1991) 375-401
9. Banker R., Davis G., and Slaughter S. Software development practices, software complexity, and maintenance performance. Management Science 44 4 (1998) 433-450
10. Beattie, S., Arnold, S., Cowan, C., Wagle, C., Wright, C., Shostack, A., 2002. Timing the application of security patches for optimal uptime. In: Proceedings of LISA XVI.
11. Borenstein S., and Netz J. Why do all the flights leave at 8 am?: competition and departure-time differentiation in airline markets. International Journal of Industrial Organization 17 5 (1999) 611-640
12. Bresnahan T., and Greenstein S. Technological competition and the structure of the computer industry. Journal of Industrial Economics 47 1 (1999) 1-40
13. Bresnahan, T., Yin, P., 2006. Economic and Technical Drivers of Technology Choice: Browsers, Working Paper, Harvard Business School, Harvard University.
14. Brown, A., Booch, G., 2002. Reusing open source software and practices: the impact of open-source on commercial vendors, in software reuse: methods, techniques, and tools. In: Gacek, C. (Ed.), Seventh International Conference, ICSR-7 Proceedings. pp. 123-136.
15. Cavusoglu, A., Cavusoglu, H., Raghunathan, S., 2005. Recent Issues in Responsible Vulnerability Disclosure, Workshop on Economics and Information Security (WEIS), Boston, MA, June.
16. Choi, J.P., Fershtman, C., Gandal, N., 2005. Internet Security, Vulnerability Disclosure, and Software Provision, Workshop on Economics of Information Security (WEIS05), Kennedy School of Government, Harvard University.
17. Cohen, A., Mazzeo, M., 2004. Competition, Product Differentiation and Quality Provision: An Empirical Equilibrium Analysis of Bank Branching Decisions, Finance and Economics Discussion Series 2004-46. Board of Governors of Federal Reserve System, Washington.
18. Domberger S., and Sherr A. The impact of competition on pricing and quality of legal services. International Review of Law and Economics 9 (1989) 41-56
19. Dranove D., and White W. Recent theory and evidence on competition in hospital markets. Journal of Economics and Management Strategy 3 1 (1994) 169-209
20. Foley, J., 2003. You May Be Next, Information Week, November 23. .
21. Forman C., Goldfarb A., and Greenstein S. How did location affect adoption of the commercial Internet? Global village vs. urban leadership. Journal of Urban Economics 58 (2005) 389-420
22. Gal-Or E. Quality and quantity competition. The Bell Journal of Economics 14 2 (1983) 590-600
23. Hann I.-H., Hui K.-L., Tom Lee S.-Y., and Ivan P.L. Overcoming online information privacy concerns: an information-processing theory approach. Journal of Management Information Systems 24 2 (2007) 13-42
24. Harter D.E., Krishnan M.S., and Slaughter S. Effects of process maturity on quality, cycle time, and effort in software product development. Management Science 46 4 (2000) 451-466
25. Higaki, Wesley, 2008. What Are Vendors Doing To Make Software Secure? Cylab Seminar. .
26. Honeynet Project, 2004. Know Your Enemy: Trends. .
27. Hoxby C. Does competition among public schools benefit students or taxpayers?. American Economic Review 90 5 (2000) 1209-1238
28. Kannan K., and Telang R. Market for software vulnerabilities? Think again. Management Science 51 5 (2005) 726-740
29. Kretschmer, T., 2005. Competing Technologies in the Database Management Systems Market, NET Institute Working Paper #05-17.
30. Levhari D., and Peles Y. Market structure, quality and durability. The Bell Journal of Economics and Management Science 4 1 (1973) 235-248
31. Li P., and Rao H.R. An examination of private intermediaries' roles in software vulnerabilities disclosure. Information Systems Frontiers 9 (2007) 531-539
32. Mazzeo M. Competition and service quality in the US airline industry. Review of Industrial Organization 22 (2003) 275-296
33. Nizovtsev D.T., and Thursby M. To disclose or not? An analysis of software user behavior. Information Economics and Policy 19 1 (2007) 43-64
34. Poulin J.S., Caruso J.M., and Hancock D.R. The business case for software reuse. IBM Systems Journal 32 4 (1993) 567-594
35. Schmalensee R. Market structure, durability, and quality: a selective survey. Economic Inquiry 17 (1979) 177-196
36. Schneier, B., 2000. Full disclosure and the window of exposure. In: CRYPTO-GRAM.
37. Spence A.M. Monopoly, quality and regulation. The Bell Journal of Economics 6 2 (1975) 417-429
38. Swan P.L. Durability of consumer goods. American Economic Review 60 (1970) 884-894
39. Symantec, 2004. Symantec Internet Security Threat Report 2004. .
40. Telang R., and Wattal S. Impact of software vulnerability announcements on the market value of software vendors - an empirical investigation. IEEE Transactions on Software Engineering 33 8 (2007) 544-557
41. Tucker, C., Miller, A., 2008. Privacy Protection and Technology Diffusion: The case of Electronic Medical Records, Working Paper, MIT Sloan School of Management.
42. West J., and Dedrick J. Innovation and control in standards architectures: the rise and fall of Japan's PC-98. Information Systems Research 11 2 (2000) 197-216
43. Wooldridge J. Econometric Analysis of Cross Section and Panel Data (2002), MIT Press
44. Wooldridge, J., 2007. What's New in Econometrics? Lecture 6: Control Functions and Related Methods. .