A game-theoretic analysis of information security investment for multiple firms in a network. Issue 10 (1st October 2017)

• Record Type: Journal Article
• Authors: Qian, Xiaofei; Liu, Xinbao; Pei, Jun; Pardalos, Panos M.; Liu, Lin
• Is Part Of: Journal of the Operational Research Society. Volume 68:Issue 10(2017)
• Page Start: 1290
• Page End: 1305
• Publication Date: 2017-10-01
• Subjects: IoT -- information security investment -- multiple-step propagation -- Nash equilibrium -- optimal solution; Operations research -- Periodicals; 658.4034
• DOI: 10.1057/s41274-016-0134-y
• Languages: English
• ISSNs: 0160-5682

Abstract

Abstract: The application of Internet of Things promotes the cooperation among firms, and it also introduces some information security issues. Due to the vulnerability of the communication network, firms need to invest in information security technologies to protect their confidential information. In this paper, considering the multiple-step propagation of a security breach in a fully connected network, an information security investment game among n firms is investigated. We make meticulous theoretic and experimental analyses on both the Nash equilibrium solution and the optimal solution. The results show that a larger network size ( n ) or a larger one-step propagation probability ( q ) has a negative effect on the Nash equilibrium investment. The optimal investment does not necessarily increase in n or q, and its variation trend depends on the concrete conditions. A compensation mechanism is proposed to encourage firms to coordinate their strategies and invest a higher amount equal to the optimal investment when they make decisions individually. At last, our model is extended by considering another direct breach probability function and another network structure, respectively. We find that a higher connection density of the network will result in a greater expected cost for each firm.