The role of hacker attacks on information security investment and firm profits is fundamental
in information security economics, which, however, has not been fully examined yet. This …

This paper investigates information security investment strategies under both targeted
attacks and mass attacks by considering strategic interactions between two competitive firms …

Information security economics, an emerging and thriving research topic, attempts to
address the problems of distorted incentives for stakeholders in an Internet environment …

This paper discusses how two competitive firms invest in information security by constructing
a differential game in which hacker knowledge dissemination and the law enforcement are …

There are several types of relations between information assets of two firms, among which
substitutable relation is such that even when one of the firms is successfully breached by …

The past few years have witnessed numerous information security incidents throughout the
world, which unfortunately become increasingly tough to be completely addressed just by …

With billions of dollars being spent on information security related products and services
each year, the economics of information security investment has become an important area …

While mandatory security standards are salient in the management of information security,
the related theoretic studies are scarce, especially when strategic hackers are considered …

Nowadays, business connection between firms becomes rather common so that one firm
stores not only its information asset but also some of other firms' information asset. The …

We investigate how firms invest in information security under Cournot and Bertrand
competition, constructing a differential game where over time hackers become …