Hackers, Users, Information Security
Ivan Png, Candy Q. Tang, Qiu-Hong Wang · Faculty Digital Archive (New York University Florence) · 2006
We analyze the strategic interactions among end-users and between end-users and a hacker.We show that security efforts by end users are strategic substitutes.This explains the inertia among end-users in taking precautions even in the face of grave potential consequences.Next, we analyze the direct and indirect effects of changes in user fixing cost and the rate of enforcement against hacking.For instance, a reduction in user fixing cost would directly lead users to increase fixing effort.However, that would make them less attractive targets, and so induce less hacking, and hence, indirectly lead users to reduce fixing.