Internet Security, Vulnerability Disclosure and Software Provision
Jay Pil Choi, Chaim Fershtman, Neil Gandal · SSRN Electronic Journal · 2005
In this paper, we examine how software vulnerabilities affect firms that license software and consumers that purchase software. In particular, we model three decisions of the firm: (i) an upfront investment in the quality of the software to reduce potential vulnerabilities; (ii) a policy decision whether to announce vulnerabilities; and (iii) a price for the software. We also model two decisions of the consumer: (i) whether to purchase the software; and (ii) whether to apply a patch.