Investments and Trade-offs in the Economics of Information Security.

Ioannidis, C.; Pym, D.; Williams, J.

Abstract

We develop and simulate a dynamic model of investment in information security. The model is based on the recognition that both IT managers and users appreciate the trade-off between two of the fundamental characteristics of information security, namely confidentiality and availability. The model’s parameters can be clustered in a manner that allows us to categorize and compare the responses to shocks of various types of organizations. We derive the system’s stability conditions and find that they admit a wide choice of parameters. We examine the system’s responses to the same shock in confidentiality under different parameter constellations that correspond to various types of organizations. Our analysis illustrates that the response to investments in information security will be uniform in neither size nor time evolution.

Citation

Ioannidis, C., Pym, D., & Williams, J. (2009). Investments and Trade-offs in the Economics of Information Security. In R. Dingledine, & P. Golle (Eds.), Financial cryptography and data security: 13th International Conference, FC 2009, Accra Beach, Barbados, February 23-26, 2009: revised selected papers (148-166). https://doi.org/10.1007/978-3-642-03549-4_9

• Conference Name: Financial Cryptography and Data Security: 13th International Conference, FC 2009, Revised Selected Papers.
• Conference Location: Accra Beach, Barbados
• Publication Date: 2009
• Deposit Date: Jan 2, 2014
• Publisher: Springer Verlag
• Volume: 5628
• Pages: 148-166
• Series Title: Lecture Notes in Computer Science
• Edition: Rev. ed.
• Book Title: Financial cryptography and data security: 13th International Conference, FC 2009, Accra Beach, Barbados, February 23-26, 2009: revised selected papers.
• ISBN: 9783642035487
• DOI: https://doi.org/10.1007/978-3-642-03549-4_9
• Public URL: https://durham-repository.worktribe.com/output/1156368