Modeling internet security investments: Tackling topological information uncertainty

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 7037 LNCS, Issue , 2011, Pages 239-257

  Pal, Ranjan ^a   Hui, Pan ^b  

^a UNIVERSITY OF SOUTHERN CALIFORNIA   (United States)

^b DEUTSCHE TELEKOM LABORATORIES   (Germany)

Author keywords

Bayesian Nash equilibria; externality; security; uncertainty

Indexed keywords

ANTIVIRUS SOFTWARES; BAYESIAN NASH EQUILIBRIA; CONNECTIVITY STRUCTURES; DISTRIBUTED COMMUNICATIONS; EQUILIBRIUM BEHAVIOR; EXTERNALITY; INCOMPLETE INFORMATION; INTERNET SECURITY; INTERNET USERS; NEIGHBORING NODES; NETWORK NODE; NON-COOPERATIVE; PARTIAL INFORMATION; REALISTIC ENVIRONMENTS; RISK MANAGEMENT TECHNIQUES; SECURITY; SECURITY IMPROVEMENT; SECURITY INVESTMENTS; SECURITY MECHANISM; STRATEGIC INTERACTIONS; SUBMODULAR; SYSTEM SECURITY; TOPOLOGICAL INFORMATION; UNCERTAINTY; USER UTILITY;

BEHAVIORAL RESEARCH; COMMUNICATION; COMPUTER VIRUSES; DECISION THEORY; ECONOMICS; GAME THEORY; INVESTMENTS; NETWORK SECURITY; RISK MANAGEMENT; TELECOMMUNICATION NETWORKS; TOPOLOGY; WORLD WIDE WEB;

INFORMATION MANAGEMENT;

EID: 81755188449     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-25280-8_18     Document Type: Conference Paper

References (50)

1. Varian, H.: System Reliability and Free Riding. In: ACM ICEC (2003)
2. Lelarge, M., Bolot, J.: Economic Incentives to Increase Security in the Internet: The Case for Insurance. In: IEEE INFOCOM (2009)
3. Pal, R., Golubchik, L.: Analyzing Self-Defense Investments In The Internet Under Cyberinsurance Coverage. In: IEEE ICDCS (2010)
4. Bohme, R., Schwartz, G.: Modeling Cyberinsurance: Towards A Unifying Framework. In: WEIS (2010)
5. Shetty, N., Schwarz, G., Feleghyazi, M., Walrand, J.: Competitive Cyberinsurance and Internet Security. In: WEIS (2009)
6. Omic, J., Orda, A., Mieghem, V.P.: Protecting Against Network Infections: A Game-Theoretic Perspective. In: IEEE INFOCOM (2009)
7. Jiang, L., Ananthram, V.,Walrand, J.: How Bad are Selfish Investments in Network Security. IEEE Transactions On Networking (2010)
8. Grossklags, J., Christin, G., Chuang, J.: Security and Insurance Management in Networks with Heterogenous Agents. In: ACM EC (2008)
9. Kunreuther, H., Heal, G.: Interdependent Security. Journal of Risk and Uncertainty 26 (2002)
10. Varian, H.R.: Microeconomic Analysis. Norton (1992)
11. Fultz, N., Grossklags, J.: Blue versus Red: Towards a Model of Distributed Security Attacks. In: Dingledine, R., Golle, P. (eds.) FC 2009. LNCS, vol. 5628, pp. 167-183. Springer, Heidelberg (2009)
12. Grossklags, J., Christin, N., Chuang, J.: Secure or Insure? A Game-Theoretic Analysis of Information Security Games. In: WWW (2008)
13. Grossklags, J., Christin, N., Chuang, J.: Security Investments(Failures) in Five Economic Environments
14. Terrence, A., Tunca, I.T.: Who Should Be Responsible for Software Security? Management Science 57(5) (2011)
15. Grossklags, J., Johnson, B.: Uncertainty In Weakest-Link Security Game. In: GameNets (2009)
16. Grossklags, J., Johnson, B., Christin, N.: The Price of Uncertainty in Security Games. Economics of Information Security and Privacy (2010)
17. Grossklags, J., Johnson, B., Christin, N.: When Information Improves Information Security. In: Sion, R. (ed.) FC 2010. LNCS, vol. 6052, pp. 416-423. Springer, Heidelberg (2010)
18. Johnson, B., Grossklags, J., Christin, N., Chuang, J.: Are Security Experts Useful? Bayesian Nash Equilibria for Network Security Games with Limited Information. In: Gritzalis, D., Preneel, B., Theoharidou, M. (eds.) ESORICS 2010. LNCS, vol. 6345, pp. 588-606. Springer, Heidelberg (2010)
19. Johnson, B., Grossklags, J., Christin, N., Chuang, J.: Uncertainty in Interdependent Security Games. In: Alpcan, T., Buttyán, L., Baras, J.S. (eds.) GameSec 2010. LNCS, vol. 6442, pp. 234-244. Springer, Heidelberg (2010)
20. Newman, M.E.J.: Assortative Mixing in Networks. Phy. Rev. Lett. 89 (2002)
21. Esary, J.D., Proschan, F., Walkup, W.: Association of Random Variables With Applications. Annals of Mathematical Statistics 38(5) (1967)
22. Fudenberg, D., Tirole, J.: Game Theory. MIT Press (1991)
23. Osborne, M.J., Rubinstein, A.: A Course in Game Theory. MIT Press (1994)
24. Galeotti, A., Goyal, S., Jackson, M.O., Vega-Redondo, F., Yariv, L.: Network Games. Review of Economic Studies 77(1) (2010)
25. Kreps, D.: Game Theory and Economic Modelling. Oxford University Press (1990)
26. Bramoulle, K., Kranton, R.: Strategic Experimentation in Networks. Journal of Economic Theory 135(1) (2007)
27. Galeotti, A., Goyal, S., Jackson, M.O., Vega-Redondo, F., Yariv, L.: Network Games. Technical Report (2006)
28. Milgrom, P., Shannon, C.: Monotone Comparative Statics. Econometrica 62 (1994)
29. Daskalakis, C., Goldberg, P.W., Papadimitrou, C.H.: The Complexity of Computing A Nash Equilibrium. SIAM Journal of Computing 39(1) (2009)
30. Schneier, B.: Secrets and Lies: Digital Security in a Networked World. John Wiley and Sons (2001)
31. Anderson, R.: Why Information Security is Hard - An Economic Perspective. In: Annual Computer Security Applications Conference (2001)
32. Anderson, R., Moore, T.: Information Security Economics and Beyond. Information Security Summit (2008)
33. Varian, H.: Managing Online Security Risks. The New York Times (June 1, 2000)
34. Ko-Miura, A.R., Yolken, B., Bambos, N., Mitchell, J.: Security Investment Games of Interdependent Organizations. Allerton (2008)
35. Katz, M., Shapiro, C.: Network Externalities, Competition, and Compatibility. The American Economic Review 75(3) (1985)
36. Kesan, J., Majuca, R., Yurcik, W.: The Economic Case for Cyber-Insurance: In Securing Privacy in the Internet Age. Stanford University Press (2005)
37. Kesan, J., Majuca, R., Yurcik, W.: Cyberinsurance As A Market-Based Solution To The Problem of Cyber-Security: A Case Study. In: WEIS (2005)
38. Scheier, B.: Its The Economics Stupid. In: WEIS (2002)
39. Yurcik, W., Doss, D.: Cyberinsurance: A Market Solution To The Internet Security Market Failure. In: WEIS (2002)
40. Lelarge, M., Bolot, J.: Cyberinsurance As An Incentive for Internet Security. In: WEIS (2008)
41. Majuca, R.P., Yurcik, W., Kesan, J.P.: The Evolution of Cyberinsurance. Information Systems Frontier (2005)
42. Schneier, B.: Insurance and the Computer Industry. Communications of the ACM 44(3) (2001)
43. Honeyman, P., Schwarz, G.: Interdependence of Reliability and Security. In: WEIS (2007)
44. Neumann, J.V., Morgenstern, O.: Theory of Games and Economic Behavior. Princeton University Press (2009)
45. Mascollel, A., Winston, M.D., Green, J.R.: Microeconomic Theory. Oxford University Press (1985)
46. Hau, A.: When is A Coinsurance-Type Insurance Policy Inferior or Even Giffen. Journal of Risk and Insurance 75(2) (2008)
47. Lelarge, M., Bolot, J.: A Local Mean Field Analysis of Security Investments in Networks. In: ACM NetEcon (2008)
48. Lelarge, M., Bolot, J.: Network Externalities and The Deployment of Security Features and Protocols in the Internet. In: ACM SIGMETRICS (2008)
49. Internet Wikipedia Source. Information Asymmetry
50. Pal, R., Golubchik, L.: Pricing and Investments in Internet Security. Arxiv (2011)