Game of information security investment: Impact of attack types and network vulnerability
We model an interconnected firms security investment against two attack types. A high network vulnerability spurs firms to invest less in information security. Liability and security information sharing can motivate firm to invest in security. Both incentives can improve firms security level and decrease firms total costs. Both incentives can be extended to the case of three or more firms.
information security investment attack types network vulnerability game theory economic incentives