Exploitation of auctions for outsourcing security-critical projects

Proceedings - IEEE Symposium on Computers and Communications

Volumn , Issue , 2011, Pages 646-651

  Kandias, Miltiadis ^a   Mylonas, Alexios ^a   Theoharidou, Marianthi ^a   Gritzalis, Dimitris ^a  

^a ATHENS UNIVERSITY OF ECONOMICS AND BUSINESS   (Greece)

Author keywords

Auction; IT Security; Outsourcing; Security Critical

Indexed keywords

AUCTION; AUCTION PROCESS; BIDDING PROCESS; IT SECURITY; SECURITY METRICS; SECURITY REQUIREMENTS; SECURITY-CRITICAL; SERVICE PROVIDER;

CRITICAL INFRASTRUCTURES;

OUTSOURCING;

EID: 80052770275     PISSN: 15301346     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ISCC.2011.5983912     Document Type: Conference Paper

References (36)

1. W. Ding, W. Yurcik, X. Yin, "Outsourcing internet security: Economic analysis of incentives for managed security service providers", Journal of Internet and Network Economics, pp. 947-958, 2005.
2. S. Oladapo, P. Zavarsky, R. Ruhl, D. Lindskog, A. Igonor, "Managing Risk of IT Security Outsourcing in the Decision-Making Stage", Proc. of the International Conference on Computational Science and Engineering, pp. 456-461, IEEE, 2009.
3. M. Armbrust, A. Fox, R. Griffith, A. Joseph, A., R. Katz, A. Konwinski, G. Lee, D. Patterson, A. Rabkin, I. Stoica, M. Zaharia, "A view of cloud computing", Com. of the ACM, Vol. 53, pp. 50-58, 2010.
4. B. Bahli, S. Rivard, "Validating measures of information technology outsourcing risk factors", Journal Omega, Vol. 33, pp. 175-187, 2005 (Pubitemid 39615362)
5. C. Fenn, R. Shooter, K. Allan, "IT Security Outsourcing: How safe is it your IT Security", Computer Law & Security Report, Vol. 18, pp. 109-111, 2002. (Pubitemid 34249783)
6. A. Khalfan, "Information security considerations in IS/IT outsourcing projects: a descriptive case study of two sectors", International Journal of Information Management, Vol. 24, pp. 29-42, 2004.
7. N. Khidzir, N. Arshad, A. Mohamed, "Information security risk management: An empirical study on the importance and practices in ICT outsourcing", in Proc. of the International Symposium in Information Technology (ITSim), pp. 1610-1615, IEEE, 2010.
8. B. Schneier, "The case for outsourcing security", Computer, Vol. 35, pp. 20-26, 2002.
9. B. Aubert, M. Patry, S. Rivard, "A framework for information technology outsourcing risk management", ACM SIGMIS Database, Vol. 36, pp. 9-28, 2005.
10. B. Bahli, S. Rivard, "The information technology outsourcing risk: A transaction cost and agency theory-based perspective", Journal of Information Technology, Vol. 18, pp. 211-221, 2003. (Pubitemid 37406519)
11. R. Gonzalez, J. Gasco, J. Llopis, "Information systems outsourcing risks: A study of large firms", Industrial Management and Data Systems, Vol. 105, pp. 45-62, 2005. (Pubitemid 40690939)
12. M. Karyda, E. Mitrou, G. Quirchmayr, "A framework for outsourcing IS/IT security services", Information Management & Computer Security, pp. 402-415, 2006. (Pubitemid 44515714)
13. J. Bulow, P. Klemperer, "Auctions versus Negotiations", The American Economic Review, Vol. 86, No. 1, pp. 180-194, 1996. (Pubitemid 126420170)
14. th International Workshop on Database and Expert Systems Applications (DEXA '02), pp. 1-7, IEEE, 2002.
15. D. Porter, R. Stephen, R. Anil, S. Vernon, "Combinatorial Auction Design", in Proc. of the National Academy of Sciences, National Academy Press, pp. 11153-11157, USA, 2003.
16. Federal Communications Commission (FCC), http://www.fcc.gov
17. V. Krishna, Auction Theory, San Diego Academic Press, USA, 2002.
18. P. Klemperer, "Auction Theory: A Guide to the Literature", Journal of Economic Surveys, Vol. 13, pp. 227-286, 1999. (Pubitemid 29392123)
19. R. Wilson, "Strategic Analysis of Auctions", in Handbook of Game Theory, R. Aumann, et al. (Eds.), USA, 1990.
20. R. Myerson, "Optimal Auction Design", Journal of Mathematics of Operations Research, Vol. 6, pp. 58-73, 1981.
21. Y. Che, "Design competition through multidimensional auctions", RAND Journal of Economics, Vol. 24, pp. 668-680, 1993.
22. st century e-commerce", Journal of Economic Perspective, Vol.14, pp. 183-192, 2000.
23. W. Vickrey, "Counterspeculation, Auctions and Competitive Sealed Tenders", Journal of Finance, Vol. 16, No. 1, pp. 8-37, 1961.
24. E. Wolfstetter, "Auctions: An introduction", Journal of Economic Surveys, Vol. 10, No. 4, pp. 367-420, 1996.
25. M. Baye, D. Kovenock, C. De Vries, "The all-pay auction with complete information", Economic Theory, Vol. 8, pp. 291-305, 1996. (Pubitemid 126172221)
26. R. Weber, "Multiple-object Auctions", International Library of Critical Writings in Economics, Vol. 113, pp. 240-268, 2000.
27. C. Courcoubetis, R. Weber, Pricing communication networks: Economics, Technology and Modelling, pp. 309-330, J. Wiley, 2003.
28. N. Bartol, B. Bates, K. Goertzel, T. Winograd, Measuring Cyber Security and Information Assurance, State-of-the-Art Report, Information Assurance Technology Analysis Center (IATAC), 2009.
29. L. Hayden, IT Security Metrics: A Practical Framework For Measuring Security and Protecting Data, McGraw Hill, 2010.
30. D. Hermann, Complete Guide to Security and Privacy Metrics, Auerbach Publications, USA, 2007.
31. National Institute of Standards & Technology, Security Metrics Guide for Information Technology Systems, NIST Special Publication 800-55, NIST, USA, 2003.
32. st ed.), 2008.
33. National Institute of Standards & Technology, Managing Risk from Information Systems - An Organizational Perspective, NIST Special Publication 800-39, NIST, USA, 2008.
34. D. Porter, S. Rassenti, A. Roopnarine, V. Smith, "Combinatorial auction design", Journal of Management Science, Vol. 49, pp. 1485-1503, 1993.
35. C. Brunner, J. Goecee, C. Holt, J. Ledyard, "An Experimental Test of Flexible Combinatorial Spectrum Auction Formats", American Economic Journal of Microeconomics, Vol. 2, pp. 39-57, 2010.
36. M. Bykowsky, R. Cull, J. Ledyard, "Mutually Destructive Bidding: The FCC Auction Design Problem", Journal of Regulatory Economics, Vol. 17, pp. 205-228, 2000.