While technology similarity in network security aggravates breach interdependence, it can
improve the efficiency of security information sharing. This paper examines the effect of …

Nowadays, business connection between firms becomes rather common so that one firm
stores not only its information asset but also some of other firms' information asset. The …

While mandatory security standards are salient in the management of information security,
the related theoretic studies are scarce, especially when strategic hackers are considered …

Information resources have been shared to promote the business operations of firms.
However, the connection of business information sharing interfaces between firms has …

There are several types of relations between information assets of two firms, among which
substitutable relation is such that even when one of the firms is successfully breached by …

This paper investigates information security investment strategies under both targeted
attacks and mass attacks by considering strategic interactions between two competitive firms …

The level of firms' information security investment has recently become a critical issue in the
management of IT infrastructure. Prior studies have not considered attack types and firms …

We build a game theory model where the market design is such that one firm invests in
security to defend against cyber attacks by two hackers. The firm has an asset, which is …

Abstract Information security management becomes more challenging nowadays due to the
diverse security risk interdependency between firms. Prior researches rarely consider the …

We investigate how firms invest in information security under Cournot and Bertrand
competition, constructing a differential game where over time hackers become …