Economics of Information Security and Privacy III

1. Front Matter

   Pages i-x

   PDF

2. The Impact of Immediate Disclosure on Attack Diffusion and Volume

   • Sam Ransbotham, Sabyasachi Mitra

   Pages 1-12

3. Where Do All the Attacks Go?

   • Dinei Florêncio, Cormac Herley

   Pages 13-33

4. Sex, Lies and Cyber-Crime Surveys

   • Dinei Florêncio, Cormac Herley

   Pages 35-53

5. The Underground Economy of Fake Antivirus Software

   • Brett Stone-Gross, Ryan Abman, Richard A. Kemmerer, Christopher Kruegel, Douglas G. Steigerwald, Giovanni Vigna

   Pages 55-78

6. The Inconvenient Truth About Web Certificates

   • Nevena Vratonjic, Julien Freudiger, Vincent Bindschaedler, Jean-Pierre Hubaux

   Pages 79-117

7. Resilience of the Internet Interconnection Ecosystem

   • Chris Hall, Ross Anderson, Richard Clayton, Evangelos Ouzounis, Panagiotis Trimintzios

   Pages 119-148

8. Modeling Internet-Scale Policies for Cleaning up Malware

   • Steven Hofmeyr, Tyler Moore, Stephanie Forrest, Benjamin Edwards, George Stelle

   Pages 149-170

9. Fixed Costs, Investment Rigidities, and Risk Aversion in Information Security: A Utility-theoretic Approach

   • Christos Ioannidis, David Pym, Julian Williams

   Pages 171-191

10. Are Home Internet Users Willing to Pay ISPs for Improvements in Cyber Security?

    • Brent Rowe, Dallas Wood

    Pages 193-212

11. Economic Methods and Decision Making by Security Professionals

    • Adrian Baldwin, Yolanta Beres, Geoffrey B. Duggan, Marco Casassa Mont, Hilary Johnson, Chris Middup et al.

    Pages 213-238

12. Real Name Verification Law on the Internet: A Poison or Cure for Privacy?

    • Daegon Cho

    Pages 239-261

13. The Privacy Landscape: Product Differentiation on Data Collection

    • Sören Preibusch, Joseph Bonneau

    Pages 263-283

The Workshop on the Economics of Information Security (WEIS) is the leading forum for interdisciplinary scholarship on information security, combining expertise from the fields of economics, social science, business, law, policy and computer science. Prior workshops have explored the role of incentives between attackers and defenders, identified market failures dogging Internet security, and assessed investments in cyber-defense. Current contributions build on past efforts using empirical and analytic tools to not only understand threats, but also strengthen security through novel evaluations of available solutions. Economics of Information Security and Privacy III addresses the following questions: how should information risk be modeled given the constraints of rare incidence and high interdependence; how do individuals' and organizations' perceptions of privacy and security color their decision making; how can we move towards a more secure information infrastructure and code base while accounting for the incentives of stakeholders?

• Information
• behavioral security
• cyber-crime
• cyberinsurance
• economics
• identity management
• modeling
• policy
• privacy
• risk management
• security
• security management
• systems
• theft and fraud
• users

• Minneapolis, USA

  Bruce Schneier

Policies and ethics