Titlebook: Economics of Information Security and Privacy III; Bruce Schneier Conference proceedings 2013 Springer Science+Business Media New York 201

轻快走过

Sex, Lies and Cyber-Crime Surveys,survey. First, losses are extremely concentrated, so that representative sampling of the population does not give representative sampling of the losses. Second, losses are based on unverified self-reported numbers. Not only is it possible for a single outlier to distort the result, we find evidence

Legion

袋鼠

The Inconvenient Truth About Web Certificates,ubious. HTTPS may fail to provide security for multiple reasons, mostly due to certificate-based authentication failures. Given the importance of HTTPS, we investigate the current scale and practices of HTTPS and certificate-based deployment. We provide a large-scale empirical analysis that consider

START

dainty

Modeling Internet-Scale Policies for Cleaning up Malware,nce of malware. However, assessing the suitability of countermeasures at this scale is hard. In this paper, we use an agent-based model, called ASIM, to investigate the impact of policy interventions at the Autonomous System level of the Internet. For instance, we find that coordinated intervention

Mawkish

Fixed Costs, Investment Rigidities, and Risk Aversion in Information Security: A Utility-theoretic ve the limiting condition under which, given a potential or realized risk, a decision to invest, delay, or abandon can be justified. Our primary focus is on the decision to defer costly deterministic investments, such as the removal of a service or implementation of a security patch, when the costs

弄皱

厚颜无耻

固执点好

Hot-Flash

The Privacy Landscape: Product Differentiation on Data Collection,ces, a sizeable proportion consider differences in data collection and processing amongst alternative suppliers when deciding where to buy. Meeting their heterogeneous privacy preferences would require varied privacy regimes between different suppliers. Based on an empirical evaluation of 140 web si