The Economics of Information Security

907 citations recorded by the source corpus.

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

So long, and no thanks for the externalities: the rational rejection of security advice by users (2009, background): “[44] R. Anderson and T. Moore.”
Before we knew it: an empirical study of zero-day attacks in the real world (2012, background): “This debate is ongoing [2, 6, 30, 31], but most participants agree that disclosing vulnerabilities causes an increase in the volume of attacks.”
Ethical Dilemmas in Take-Down Research (2011, neutral): “‘computer science’ aspects of the situation [2].”
A taxonomy of cyber-harms: Defining the impacts of cyber-attacks and understanding how they propagate (2018, methodology): “As the literature from criminology and cyber-economics suggests [18, 19, 24, 25], harm has interesting characteristics that relate to cascading effects.”
The Economics of Privacy (2016, background): “For a review of the literature on the economics of information security, see Anderson and Moore (2006).”
Secure or insure?: a game-theoretic analysis of information security games (2008, background): “Important common anchors are the observations that misaligned incentives and positive and negative externalities play significant roles in the strategies used by each party in the battle between attackers and potential victims [4] [5].”