Nowadays, business connection between firms becomes rather common so that one firm
stores not only its information asset but also some of other firms' information asset. The …

While mandatory security standards are salient in the management of information security,
the related theoretic studies are scarce, especially when strategic hackers are considered …

Information resources have been shared to promote the business operations of firms.
However, the connection of business information sharing interfaces between firms has …

There are several types of relations between information assets of two firms, among which
substitutable relation is such that even when one of the firms is successfully breached by …

Abstract Information security outsourcing has become an emerging trend in the operations of
information security, but the relation between information assets of firms and attack modes of …

This paper investigates information security investment strategies under both targeted
attacks and mass attacks by considering strategic interactions between two competitive firms …

We build a game theory model where the market design is such that one firm invests in
security to defend against cyber attacks by two hackers. The firm has an asset, which is …

This paper investigates information sharing and security investments by two firms provided
that their information assets are complementary in the sense that their combined information …

Information security economics, an emerging and thriving research topic, attempts to
address the problems of distorted incentives for stakeholders in an Internet environment …

We investigate how firms invest in information security under Cournot and Bertrand
competition, constructing a differential game where over time hackers become …