An investigation of decision-making and the tradeoffs involving computer security risk

15th Americas Conference on Information Systems 2009, AMCIS 2009

Volumn 8, Issue , 2009, Pages 5205-5212

  Chen, Li Chiou ^a   Farkas, Daniel ^a  

^a PACE UNIVERSITY   (United States)

Author keywords

Computer security risk; Risk attitude; Risk perception; Risk tradeoff; Time discounting

Indexed keywords

COMPUTER SECURITY RISKS; INDIVIDUAL DECISION MAKING; INFORMATION SECURITY MANAGEMENTS; RISK ATTITUDE; RISK TRADEOFF; TIME DISCOUNTING;

COMMERCE; INFORMATION SYSTEMS; RISK PERCEPTION; SECURITY SYSTEMS;

SECURITY OF DATA;

EID: 84870375304     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (29)

1. Acquisti, A., and Grossklags, J. "Privacy and Rationality in Individual Decision Making, " IEEE Security & Privacy (3:1), January/February 2005, pp 24-30.
2. Asgharpour, F., Liu, D., and Camp, L.J. "Mental Models of Computer Security Risks, " in: Workshop on the Economics of Information Security, Pittsburgh, PA, 2007.
3. Aytes, K., and Connolly, T. "Computer Security and Risky Computing Practices: A Rational Choice Perspective, " Journal of Organizational and End User Computing (16:3), Jul-Sep 2004, pp 22-40.
4. Bhatnagar, A., Misra, S., and Rao, H.R. "On Risk Convenience, and Internet Shopping Behavior, " Communications of the ACM (43:11), November 2000, pp 98-105.
5. Bodin, L.D., Gordon, L.A., and Loeb, M.P. "Information Security and Risk Management, " Communications of ACM (51:4), April 2008.
6. Chen, L.-C., and Farkas, D. "Individual Risk Perception and Attitude towards Computer Security Risks, " International conferences on Internet Technologies and Applications, North Wales, UK, 2009.
7. Cranor, L.F., and Garfinkel, S. (eds.) Security and Usability. O'Reilly, Sebastopol, CA, 2005.
8. Dhamija, R., Tygar, J.D., and Hearst, M. "Why Phishing Works, " in: ACM CHI, Montreal, Canada, 2006.
9. Diesner, J., Kumaraguru, P., and Carley, K.M. "Mental models of data privacy and security extracted from interviews with indians, " 55th Annual Conference of the International Communication Association, New York, NY, 2005.
10. Downs, J.S., Holbrook, M., and Cranor, L.F. "Behavioral Response to Phishing Risk, " in: APWG eCrime Researchers Summit, Pittsburgh, PA, 2007.
11. Friedman, M., and Savage, L.J. "The Utility Analysis of Choices Involving Risk, " The Journal of Political Economy (56:4), August 1948, pp 279-304
12. Grossklags, J., Christin, N., and Chuang, J. "Predicted and Observed User Behavior in the Weakest-Link Security Game, " in: Usability, Psychology, and Security San Francisco, CA, 2008.
13. Hardee, J.B., West, R., and Mayhorn, C.B. "To Download or Not to Download: An Examination of Computer Security Decision Making, " ACM Interactions), May/June 2006, pp 32-27.
14. Jens Grossklags, A.A. "When 25 Cents is too much: An Experiment on Willingness-To-Sell and Willingness-To-Protect Personal Information " Workshop on the Economics of Information Security, Pittsburgh, PA, 2007.
15. Kahneman, D., and Tversky, A. "Prospect Theory: An Analysis of Decision under Risk, " Econometrica (47:2), March 1979, pp 263-291.
16. Liu, D., Asgharpour, F., and Camp, L.J. "Risk Communication in Computer Security Using Mental Models, " Usable Security, Trinidad/Tobago, 2007.
17. Loewenstein, G. "The Fall and Rise of Psychological Explanations in the Economics of Intertemporal Choice, " in: Choice over Time, G. Loewenstein and J. Elster (eds.), Russell Sage Foundation, New York, 1992.
18. Loewenstein, G., and Prelec, D. "Anomalies in Intertemporal Choice: Evidence and an Interpretation, " The Quarterly Journal of Economics (107:2), May 1992, pp 573-597.
19. Machina, M.J. "Expected Utility Hypothesis, " in: Utility and Probability: Utility and Probability, J. Eatwell, M. Milgate and P. Newman (eds.), W. W. Norton & Company, 1990.
20. Miyazaki, A.D., and Fernadez, A. "Consumer Perceptions of Privacy and Security Risks for Online Shopping, " The Journal of Consumer Affairs (35:1) 2001, pp 27-44.
21. Morgan, M.G. "Probing the Question of Technology-Induced Risk, " IEEE Spectrum (18:11), November 1981, pp 58-64.
22. Morgon, M.G., Fischhoff, B., Bostrom, A., and Atman, C.J. Risk Communication: A Mental Models Approach Cambridge University Press, Cambridge, UK, 2001.
23. Norman, D. "Some Observations on Mental Models, " in: Mental Models, D. Gentner and A. Stevens (eds.), LEA, 1983.
24. Stoneburner, G., Goguen, A., and Feringa, A. "Risk Management Guide for Information Technology Systems, " D.o.C. National Institute of Standards and Technology (ed.), 2002.
25. Tversky, A., and Kahneman, D. "The Framing of Decisions and the Psychology of Choice, " Science (211:4481), Jan. 30 1981, pp 453-458.
26. Tversky, A., and Kahneman, D. " Advances in Prospect Theory: Cumulative Representation of Uncertainty, " Journal of Risk and Uncertainty (5:4), October 1992, pp 297-323.
27. Weber, E.U., Blais, A.-R., and Betz, N.E. "A domain-specific risk-attitude scale: measuring risk perceptions and risk behaviors, " Journal of Behavioral Decision Making (15:4), October 2002.
28. Weber, E.U., and Hsee, C. "Cross-Cultural Differences in Risk Perception, but Cross-Cultural Similarities in Attitudes towards Perceived Risk, " Management Science (44:9), September 1998, pp 1205-1217.
29. West, R. "The Psychology of Security, " Communications of ACM (51:4) 2008, pp 34-40.