NDLI: Information security investment for competitive firms with hacker behavior and security requirements

Content Provider	Springer Nature Link
Author	Gao, Xing Zhong, Weijun
Copyright Year	2015
Abstract	This paper investigates information security investment strategies under both targeted attacks and mass attacks by considering strategic interactions between two competitive firms and a hacker. We find that the more attractive firm invests more in information security, suffers more frequent attacks and enjoys a lower expected benefit, while the hacker achieves a higher expected benefit under targeted attacks than under mass attacks. We further examine the effect of security requirements on the two firms’ investment strategies in information security. We indicate that security requirements sometimes can drastically alter the comparisons of these investment strategies under the two types of cyber attacks. The hacker would balance the firms’ attractiveness in information assets and security requirements when determining its investment decisions in cyber attacks. By assuming that security requirements are endogenous, we demonstrate that under targeted attacks and mass attacks both firms would like to regulate rigorous security requirements when their degree of competition becomes fierce but would like to choose loose security requirements when the degree of competition remains mild.
Starting Page	277
Ending Page	300
Page Count	24
File Format	PDF
ISSN	02545330
Journal	Annals of Operations Research
Volume Number	235
Issue Number	1
e-ISSN	15729338
Language	English
Publisher	Springer US
Publisher Date	2015-06-19
Publisher Place	New York
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Targeted attacks Mass attacks Information security Security requirements Operation Research/Decision Theory Combinatorics Theory of Computation
Content Type	Text
Resource Type	Article
Subject	Management Science and Operations Research

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Optimal firm investment in security

Growth versus security tradeoffs indynamic investment analysis

Organized vs. Competitive Corruption

Sequential Discrete p-Facility Models for Competitive Location Planning

Locating Multiple Competitive Facilities: Spatial Interaction Models with Variable Expenditures

Optimal investment facing possible accidents

On Multiple Criteria Decision Support for Suppliers on the Competitive Electric Power Market

A Competitive Heuristic Solution Technique for Resource-Constrained Project Scheduling

Investment and finance: A theoretical approach

Information security investment for competitive firms with hacker behavior and security requirements

Similar Documents

Optimal firm investment in security

Growth versus security tradeoffs indynamic investment analysis

Organized vs. Competitive Corruption

Sequential Discrete p-Facility Models for Competitive Location Planning

Locating Multiple Competitive Facilities: Spatial Interaction Models with Variable Expenditures

Optimal investment facing possible accidents

On Multiple Criteria Decision Support for Suppliers on the Competitive Electric Power Market

A Competitive Heuristic Solution Technique for Resource-Constrained Project Scheduling

Investment and finance: A theoretical approach

Information security investment for competitive firms with hacker behavior and security requirements