Economics of Information Security and Privacy

ISBN-13: 9781441969668 / Angielski / Twarda / 2010 / 320 str.

Tyler Moore; David Pym; Christos Ioannidis

Opis

The Workshop on the Economics of Information Security was established in 2002 to bring together computer scientists and economists to understand and improve the poor state of information security practice. WEIS was borne out of a realization that security often fails for non-technical reasons. Rather, the incentives of both - fender and attacker must be considered. Earlier workshops have answered questions ranging from?nding optimal levels of security investement to understanding why privacy has been eroded. In the process, WEIS has attracted participation from the diverse?elds such as law, management and psychology. WEIS has now established itself as the leading forum for interdisciplinary scholarship on information security. The eigth installment of the conference returned to the United Kingdom, hosted byUniversityCollegeLondononJune24-25,2009.Approximately100researchers, practitioners and government of?cials from across the globe convened in London to hear presentations from authors of 21 peer-reviewed papers, in addition to a panel and keynote lectures from Hal Varian (Google), Bruce Schneier (BT Co- terpane), Martin Sadler (HP Labs), and Robert Coles (Merrill Lynch). Angela Sasse and David Pym chaired the conference, while Christos Ioannidis and Tyler Moore chaired the program committee.

Spis treści

and Overview.- The Price of Uncertainty in Security Games.- Nobody Sells Gold for the Price of Silver: Dishonesty, Uncertainty and the UndergroundEconomy.- Security Economics and Critical National Infrastructure.- Internet Multi-Homing Problems: Explanations from Economics.- Modeling the Security Ecosystem - The Dynamics of (In)Security.- Modeling the Economic Incentives of DDoS Attacks: Femtocell Case Study.- The Privacy Jungle:On the Market for Data Protection in Social Networks.- The Policy Maker's Anguish: Regulating Personal Data Behavior Between Paradoxes and Dilemmas.- Valuating Privacy with Option Pricing Theory.- Optimal Timing of Information Security Investment: A Real Options Approach.- Competitive Cyber-Insurance and Internet Security.- Potential Rating Indicators for Cyberinsurance: An Exploratory Qualitative Study.- The Risk of Risk Analysis And its Relation to the Economics of Insider Threats.- Competition, Speculative Risks, and IT Security Outsourcing.

Blurb

The Workshop on the Economics of Information Security (WEIS) is the leading forum for interdisciplinary research and scholarship on information security and privacy, combining ideas, techniques, and expertise from the fields of economics, social science, business, law, policy, and computer science.

In 2009, WEIS was held in London, at UCL, a constituent college of the University of London. Economics of Information Security and Privacy includes chapters presented at WEIS 2009, having been carefully reviewed by a program committee composed of leading researchers. Topics covered include identity theft, modeling uncertainty's effects, future directions in the economics of information security, economics of privacy, options, misaligned incentives in systems, cyber-insurance, and modeling security dynamics.

Economics of Information Security and Privacy is designed for managers, policy makers, and researchers working in the related fields of economics of information security. Advanced-level students focusing on computer science, business management and economics will find this book valuable as a reference.