25 conferences, 544 papers (534 files available).
2026 · 2025 · 2024 · 2023 · 2022 · 2021 · 2020 · 2019 · 2018 · 2017 · 2016 · 2015 · 2014 · 2013 · 2012 · 2011 · 2010 · 2009 · 2008 · 2007 · 2006 · 2005 · 2004 · 2003 · 2002
WEIS 2026
| Full name | The 25th Workshop on the Economics of Information Security |
|---|---|
| Dates | 2026-06-02 – 2026-06-03 |
| Location | Berkeley, California, USA |
| Venue | Goldman Theater, David Brower Center, 2150 Allston Way, Berkeley, CA 94704 |
| Website | https://weis2026.econinfosec.org/ |
| Papers | 20 (18 files available) |
WEIS 2025
| Full name | The 24th Workshop on the Economics of Information Security |
|---|---|
| Dates | 2025-06-23 – 2025-06-25 |
| Location | Tokyo, Japan |
| Venue | Institute of Industrial Science (IIS), Komaba Research Campus, The University of Tokyo, Komaba 4-6-1, Meguro-ku, Tokyo |
| Website | http://kmlabcw.iis.u-tokyo.ac.jp/weis/2025/ |
| Papers | 25 (25 files available) |
| # | Title | Authors | File |
|---|---|---|---|
| 1 | Vendor-Originated Vulnerabilities and Data Breaches: A Large-Scale Empirical Study of Threshold Effects and Mitigation | Santhosh Srinivas (Virginia Tech), Leting Zhang (University of Delaware), Huigang Liang (University of Memphis) | |
| 2 | Scoring the Unscorables: Cyber Risk Assessment Beyond Internet Scans | Armin Sarabi (University of Michigan), Manish Karir (SignetRisk Analytics, Inc.), Mingyan Liu (University of Michigan) | |
| 3 | Expanding the Scope: An Empirical Approach for Identifying High-Risk Users | Corey Bolger (The University of Tulsa), Tyler Moore (The University of Tulsa) | |
| 4 | Tokenomics Impact on User Behavior: Observations from NFT-Collateralized Lending Platforms | Jin-Dong Dong (Carnegie Mellon University), Daisuke Kawai (Carnegie Mellon University), Nicolas Christin (Carnegie Mellon University) | |
| 5 | Cryptocurrency Sanctions: Compliance, Enforcement & Impacts | Josephine Wolff (Tufts University), Daniel Drezner (Tufts University) | |
| 6 | "Spot to The Future" Attacks on Cryptocurrency Derivative Markets | Andrew Morin (The University of Tulsa), Tyler Moore (The University of Tulsa) | |
| 7 | On the Nature and Security of Expiring Digital Cash | Frank Stajano (University of Cambridge), Ferdinando Samaria (University of Cambridge), Shuqi Zi (University of Cambridge) | |
| 8 | Does Firm Size Influence the Collection of Sensitive Data?: A Study of Child-Orientated Apps | Grazia Cecere (Institut Mines-Telecom, Business School), Vincent Lefrere (Institut Mines-Telecom, Business School), Catherine Tucker (Massachusetts Institute of Technology (MIT) - Sloan) | |
| 9 | Privacy Spillovers across Competing Platforms | Raveesh Mayya (New York University), Jiding Zhang (Arizona State University) | |
| 10 | The Effects of Privacy Regulation on the Supply of Stolen Data | Anderson Frailey (University of Virginia) | |
| 11 | Knowledge Worker Strategy: Effort Allocation Dynamics in Cybersecurity Crowdsourcing Platforms | Dana Etgar Itzhaki (Tel Aviv University), Neil Gandal (Tel Aviv University), Michael Riordan (Columbia University) | |
| 12 | Unfairness in the Bug Bounty Ecosystem: Problems, Metrics, and Solutions | Yangheran Piao (University of Edinburgh), Daniel W. Woods (University of Edinburgh) | |
| 13 | Realigning Incentives to Build Better Software: A Holistic Approach to Vendor Accountability | Gergely Biczok (Budapest University of Technology and Economics / University of Michigan), Sasha Romanosky (RAND Corporation), Mingyan Liu (University of Michigan) | |
| 14 | Market Adoption of Cybersecurity: A Dynamic Analysis | Pengfei Zhang (The University of Texas at Dallas) | |
| 15 | Anticipating Personal Cyber Insurance Disputes: A US/UK User Study | Temima Hrle (University of Edinburgh), Yangheran Piao (University of Edinburgh), Daniel Woods (University of Edinburgh) | |
| 16 | Quantifying costs of enhanced security in multifactor authentication | Seth Hastings (The University of Tulsa), Tyler Moore (The University of Tulsa), Neil Gandal (Tel Aviv University), Noa Barnir (Tel Aviv University) | |
| 17 | Advanced Persistent Threat Defense: History and Future in Four Solutions to One Game | Daniel Arce (University of Texas at Dallas) | |
| 18 | Workers' Rights not to be learned for AI: General Legal Framework Suggested from Japanese Labour Law Context | Yuki Okamura (NTT Social Informatics Laboratories), Miho Ikeda (NTT Social Informatics Laboratories) | |
| 19 | A Measured Response - On the Nexus of Large-Scale Technical Measurements and Cybercrime Policing | Hugo Bijmans (Delft University of Technology / TNO), Michel van Eeten (Delft University of Technology), Rolf van Wegberg (Delft University of Technology) | |
| 20 | Competition and Cybercrime: A Theoretical Assessment and Empirical Application | Chitra Marti (New York University, Stern School of Business and Cornerstone Research) | |
| 21 | CyLoss: A Cyber Incident Dataset for Cost Modeling | Weibo Zhao (National University of Singapore), Bonan Ruan (National University of Singapore), Jiahao Liu (National University of Singapore), Yunshan Ma (Singapore Management University), Huanhuan Zheng (National University of Singapore), Zhenkai Liang (National University of Singapore) | |
| 22 | Examining Newly Registered Phishing Domains at Scale | Sharad Agarwal (University College London), Marie Vasek (University College London) | |
| 23 | Not just BANAL: How branding shapes cybercrime ecosystems | Ben Collier (University of Edinburgh), Richard Clayton (University of Cambridge) | |
| 24 | Raising the Bar: Assessing Historical Cryptocurrency Exchange Practices in Light of the EU's MiCA and DORA Regulation | Marilyne Ordekian (University College London), Ingolf Becker (University College London), Tyler Moore (The University of Tulsa), Marie Vasek (University College London) | |
| 25 | How informative are cybersecurity risk disclosures? Empirical analysis of breached firms | Matthew Adams (The University of Tulsa), Tyler Moore (The University of Tulsa) |
WEIS 2024
| Full name | The 23rd Workshop on the Economics of Information Security |
|---|---|
| Dates | 2024-04-08 – 2024-04-10 |
| Location | Dallas, Texas, USA |
| Venue | The University of Texas at Dallas, Student Services Building Addition (SSA), SSA 13.330 (SSA Auditorium) |
| Website | https://weis.utdallas.edu/ |
| Papers | 18 (18 files available) |
| # | Title | Authors | File |
|---|---|---|---|
| 1 | Upgraded Software and Embedded Improvements: A Puzzle of User Heterogeneity | Raviv Murciano-Goroff (Boston University), Ran Zhuo (University of Michigan), Shane Greenstein (Harvard Business School and NBER) (presenter) | |
| 2 | Role of Formal Alliances in Creating Capacity for the Global Diffusion of National Cybersecurity Strategies | Nadiya Kostyuk (Georgia Institute of Technology), Evgenia Sidorova (Georgia Institute of Technology) | |
| 3 | The Case for an Icelandic Cyber Exploitation and Defense (ICED) Force for NATO Coalition Operations | Johan Sigholm (Swedish Defense University), Bjarni Már Magnússon (Bifröst University), Magnús Skjöld (Bifröst University), Theodor Gislason (Syndis), Gregory Falco (Cornell University) | |
| 4 | What has the U.S. government gained by formalizing Team Telecom? ―Team Telecom and the FCC's Dual Security Approach | Anna Oriishi (Keio University) | |
| 5 | Non-governmental Governance of Trust on the Internet: WebPKI as Public Good | Vagisha Srivastava (Georgia Institute of Technology), Karl Grindal (University of New Hampshire), Milton Mueller (Georgia Institute of Technology) | |
| 6 | Breaking the Ice: Using Transparency to Overcome the Cold Start Problem in an Underground Market | Tina Marjanov (University of Cambridge), Konstantinos Ioannidis (University of Cambridge), Tom Hyndman (University of Cambridge), Nicolas Seyedzadeh (University of Cambridge), Alice Hutchings (University of Cambridge) | |
| 7 | Peer(ing) Pressure: Achieving Social Action at Scale in the Internet Infrastructure | Ben Collier (University of Edinburgh), Richard Clayton (University of Cambridge) | |
| 8 | Data Risk, Firm Growth and Innovation | Roxana Mihet (HEC Lausanne & Swiss Finance Institute), Orlando M. Da Costa Gomes (Lisbon Accounting and Finance University), Kumar Rishabh (HEC Lausanne & University of Basel) | |
| 9 | Cyber Risk and the Cross-Section of Stock Returns | Loïc Maréchal (University of Lausanne), Daniel Celeny (Armasuisse S+T) | |
| 10 | A History of Cyber Risk Transfer | Daniel Woods (University of Edinburgh & British University in Dubai), Josephine Wolff (Tufts University) | |
| 11 | Beyond Technicalities: Assessing Cyber Risk by Incorporating Human Factors | Sasha Romanosky (RAND Corporation), Wenjing Huang (RAND Corporation), Joe Uchill (RAND Corporation) | |
| 12 | Implementation of Information Security Controls Now or Later: Delay Discounting of Losses and Gains | Marte Marjorie Søgnen (NTNU), Adam Szekeres (NTNU), Einar Arthur Snekkenes (NTNU) | |
| 13 | Prioritizing Investments in Cybersecurity: Empirical Evidence from an Event Study on the Determinants of Cyberattack Costs | Daniel Celeny (EPFL & Armasuisse S+T), Loïc Maréchal (University of Lausanne), Evgueni Rousselot (Armasuisse S+T), Alain Mermoud (Armasuisse S+T), Mathias Humbert (University of Lausanne) | |
| 14 | Valuation of Confidentiality and Availability in a Personal Ransomware Attack Scenario | Freya Gassmann (Rheinland-Pfälzische Technische Universität Kaiserslautern-Landau), Janina Beck (Boston Consulting Group), Nora Gourmelon (University of Erlangen-Nuremberg), Zinaida Benenson (University of Erlangen-Nuremberg) | |
| 15 | Using Simulations to Determine Economic Cost of a Cyber Attack | Nina Sokol (University of Zagreb), Viktoria Kežman (University of Zagreb), Stjepan Groš (University of Zagreb) | |
| 16 | The Welfare Effects of Ad-Blocking | Fengyang Lin (Cornell University), Cristobal Cheyre (Cornell University), Alessandro Acquisti (Carnegie Mellon University) | |
| 17 | Have I Seen you Before? Measuring the Value of Tracking for Digital Advertising | Grazia Cecere (Institut Mines Telecom Business School), Sarah Lemaire (JRC, Seville) | |
| 18 | Competition and Cybercrime: An Application to Healthcare Digitization | Chitra Marti (New York University) |
WEIS 2023
| Full name | The 22nd Workshop on the Economics of Information Security |
|---|---|
| Dates | 2023-07-05 – 2023-07-07 |
| Location | Geneva, Switzerland |
| Venue | Campus Biotech |
| Website | https://weis2023.econinfosec.org/ |
| Papers | 15 (15 files available) |
| # | Title | Authors | File |
|---|---|---|---|
| 1 | Time Dynamics of Cyber Risk | Martin Eling (University of St.Gallen), Rustam Ibragimov (Imperial College London), Dingchen Ning (University of St. Gallen) (presenter) | |
| 2 | M&A Effect on Data Breaches in Hospitals: 2010-2022 | Nan Clement (University of Texas at Dallas) (presenter) | |
| 3 | Does Decomposing Losses Improve Our Understanding of the Financial Impact of Data Breaches? | Justin Theriot (RiskLens) (presenter), Benjamin Gowan (RiskLens) | |
| 4 | Argot as a Trust Signal: Slang, Jargon & Reputation on a Large Cybercrime Forum | Jack Hughes (University of Cambridge) (presenter), Andrew Caines (University of Cambridge), Alice Hutchings (University of Cambridge) | |
| 5 | You Can Tell a Cybercriminal by the Company they Keep: A Framework to Infer the Relevance of Underground Communities to the Threat Landscape | Michele Campobasso (Eindhoven University of Technology) (presenter), Radu Rădulescu (Eindhoven University of Technology), Sylvan Brons (Eindhoven University of Technology), Luca Allodi (Eindhoven University of Technology) | |
| 6 | Enhancing Vulnerability Prioritization: Data-Driven Exploit Predictions with Community-Driven Insights | Jay Jacobs (Cyentia), Sasha Romanosky (RAND Corporation), Octavian Suciu (University of Maryland), Ben Edwards (Cyentia Institute), Armin Sarabi (University of Michigan) (presenter) | |
| 7 | A Theory of Open Source Security: The Spillover of Security Knowledge in Vulnerability Disclosures through Software Supply Chains | Yu-Kai Lin (Georgia State University) (presenter), Weifeng Li (University of Georgia) | |
| 8 | Cyberattacks, Media Coverage and Municipal Finance | Lefteris Andreadis (Cyprus University of Technology) (presenter), Elena Kalotychou (Cyprus University of Technology), Christodoulos Louca (Cyprus University of Technology), Christian Lundblad (University of North Carolina, Chapel Hill), Christos Makridis (Stanford University) | |
| 9 | Trade-offs in Automating Platform Regulatory Compliance By Algorithm: Evidence from the COVID-19 Pandemic | Grazia Cecere (Institut Mines Telecom, Business School), Clara Jean (Grenoble Ecole de Management) (presenter), Vincent Lefrere (Institut Mines Telecom, Business School), Catherine Tucker (MIT Sloan School of Management and NBER) | |
| 10 | Municipal Cyber Risk | Jonathan Jensen (Massachusetts Institute of Technology), Fiona Paine (Massachusetts Institute of Technology) (presenter) | |
| 11 | Attackers and Defenders in Cybersecurity and their Optimal Investment Decisions | Austin Ebel (New York University) (presenter), Debasis Mitra (Columbia University) | |
| 12 | Interdependent Security Games in the Stackelberg Style: How First-Mover Advantage Impacts Free-Riding and Security (Under-)Investment | Ziyuan Huang (University of Michigan, Ann Arbor) (presenter), Parinaz Naghizadeh (The Ohio State University), Mingyan Liu (University of Michigan, Ann Arbor) | |
| 13 | The Potential of Self-Regulation for Front-Running Prevention on DEXes | Lioba Heimbach (ETH Zurich) (presenter), Eric Schertenleib (ETH Zurich), Roger Wattenhofer (ETH Zurich) | |
| 14 | Secure and Efficient Networks | Oleh Stupak (University of Cambridge) (presenter) | |
| 15 | Birds of a Feather? A Comparative Analysis of DDoS Victimisation by IoT Botnet and Amplification Attacks | Swaathi Vetrivel (Delft University of Technology) (presenter), Arman Noroozian (University of Amsterdam), Daisuke Makita (Yokohama National University), Katsunari Yoshioka (Yokohama National University), Michel van Eeten (Delft University of Technology), Carlos H. Gañán (Delft University of Technology) |
WEIS 2022
| Full name | The 21st Workshop on the Economics of Information Security |
|---|---|
| Dates | 2022-06-21 – 2022-06-22 |
| Location | Tulsa, Oklahoma, USA |
| Venue | Hyatt Regency Tulsa, 100 E 2nd St, Tulsa, OK 74103 |
| Website | https://weis2022.econinfosec.org/ |
| Local website copy | Browse the local copy |
| Papers | 16 (16 files available) |
| # | Title | Authors | File |
|---|---|---|---|
| 1 | Exploring the role of data enclosure in the digital political economy | Brenden Kuerbis (Georgia Institute of Technology), Milton Mueller (Georgia Institute of Technology) | |
| 2 | Impact of App Privacy Label Disclosure on Demand: An Empirical Analysis | Rahul Telang (Carnegie Mellon University), Rajiv Garg (Emory University) | |
| 3 | Prior Fraud Exposure and Precautionary Credit Market Behavior | Ying Lei Toh (Federal Reserve Bank of Kansas City), Nathan Blascak (Federal Reserve Bank of Philadelphia) | |
| 4 | Contagion or competitive effects?: Lenders’ response to peer firm cyberattacks | Amy Sheneman (The Ohio State University) | |
| 5 | Empirically Evaluating the Effect of Cybersecurity Precautions on Incidents in Israeli Enterprises | Neil Gandal (Tel Aviv University and CEPR), Tyler Moore (University of Tulsa), Michael Riordan (Columbia University), Noa Barnir (Tel Aviv University) | |
| 6 | No research, no risk? An empirical study of determinants of information leakage attacks | Oleh Stupak (University of Oxford, Oxford Internet Institute) | |
| 7 | Reducing Attack Surface by Learning Adversarial Bag of Tricks | William Casey (USNA), J Goohs (US Navy) | |
| 8 | Efficient Collective Action for Tackling Time-Critical Cybersecurity Threats | Sébastien Gillard (Department of Defense Economics, Military Academy at ETH Zurich), Dimitri Percia David (Information Science Institute, University of Geneva), Alain Mermoud (Cyber-Defence Campus, armasuisse Science and Technology), Thomas Maillart (Information Science Institute, University of Geneva) | |
| 9 | Treating the Symptoms or the Cause? Talent Acquisition in Response to Data Breaches | Sarah Bana (Stanford), Erik Brynjolfsson (Stanford), Wang Jin (MIT), Sebastian Steffen (MIT), Xiupeng Wang (Skidmore) | |
| 10 | Information Frictions and Heterogeneity in Valuations of Personal Data | Avinash Collis (University of Texas at Austin), Alex Moehring (MIT), Ananya Sen (Carnegie Mellon University), Alessandro Acquisti (Carnegie Mellon University) | |
| 11 | Extracting Godl [sic] from the Salt Mines: Ethereum Miners Extracting Value | Julien Piet (UC Berkeley), Jaiden Fairoze (UC Berkeley), Nicholas Weaver (UC Berkeley and ICSI) | |
| 12 | Breaking the Stablecoin Buck: Measuring the Impact of Security Breach and Liquidation Shocks | Andrew Morin (The University of Tulsa), Tyler Moore (The University of Tulsa), Eric Olson (The University of Tulsa) | |
| 13 | Pricing Security in Proof-of-Work Systems | George Bissias (University of Massachusetts Amherst), Rainer Böhme (University of Innsbruck), David Thibodeau (University of Massachusetts Amherst), Brian Neil Levine (University of Massachusetts Amherst) | |
| 14 | Characterising 0-Day Exploit Brokers | Daniel W Woods (University of Innsbruck), Matthias Dellago (University of Innsbruck), Andrew Simpson (University of Oxford) | |
| 15 | Modelling Ransomware Attacks using POMDPs | Henry Skeoch (University College London) | |
| 16 | A “sophisticated attack”? Innovation, technical sophistication, and creativity in the cybercrime ecosystem | Ben Collier (University of Edinburgh), Richard Clayton (University of Cambridge) |
WEIS 2021
| Full name | The 20th Workshop on the Economics of Information Security |
|---|---|
| Dates | 2021-06-28 – 2021-06-29 |
| Location | Virtual (online) |
| Venue | Online |
| Website | https://weis2021.econinfosec.org/ |
| Papers | 15 (15 files available) |
WEIS 2020
| Full name | The 19th Workshop on the Economics of Information Security |
|---|---|
| Dates | 2020-12-14 – 2020-12-15 |
| Location | Virtual (originally planned in Brussels, Belgium) |
| Venue | Online (hosted by the Centre for European Policy Studies, CEPS) |
| Website | https://weis2020.econinfosec.org/ |
| Papers | 15 (15 files available) |
| # | Title | Authors | File |
|---|---|---|---|
| 1 | Prioritizing Vulnerability Response: a Stakeholder-Specific Vulnerability Categorization | Jonathan Spring (CERT/CC, Software Engineering Institute, Carnegie Mellon University), Allen Householder (CERT/CC, Software Engineering Institute, Carnegie Mellon University), Art Manion (CERT/CC, Software Engineering Institute, Carnegie Mellon University), Eric Hatleback (CERT/CC, Software Engineering Institute, Carnegie Mellon University), Deana Shick (Rockwell) | |
| 2 | Underlying and Consequential Costs of Cyber Security Breaches: Changes in Systematic Risk | Dennis D. Malliouris (University of Oxford), Andrew Simpson (University of Oxford) | |
| 3 | Cybersecurity Investments and the Cost of Capital | Taha Havakhor (Temple University), Mohammad Rahman (Purdue University), Tianjian Zhang (Oklahoma State University) | |
| 4 | Cyber incidents, security measures and financial returns: Empirical evidence for Dutch firms | Milena Dinkova (CPB Netherlands Bureau for Economic Policy Analysis), Ramy El-Dardiry (CPB Netherlands Bureau for Economic Policy Analysis), Bastiaan Overvest (CPB Netherlands Bureau for Economic Policy Analysis) | |
| 5 | Can Insider Trades Reliably Predict Cybersecurity Hazards in Public Firms? | Taha Havakhor (Temple University), Obi Ogbanufe (Oklahoma State University), Anthony Vance (Temple University) | |
| 6 | Provider Output and Downstream Firms’ Service Tier Choice | Hooman Hidaji (University of Calgary), Lisa Yeo (University of California, Merced) | |
| 7 | Cybercrime is (often) boring: maintaining the infrastructure of cybercrime economies | Ben Collier (University of Cambridge), Richard Clayton (University of Cambridge), Alice Hutchings (University of Cambridge), Daniel Thomas (University of Strathclyde) | |
| 8 | SAVing the Internet: Explaining the Adoption of Source Address Validation by Internet Service Providers | Qasim Lone (TU Delft), Maciej Korczyński (Univ. Grenoble Alpes), Carlos H. Gañán (TU Delft), Michel van Eeten (TU Delft) | |
| 9 | The Impact of the GDPR on Content Providers | Vincent Lefrere (Institut Mines-Télécom), Logan Warberg (Carnegie Mellon University), Cristobal Cheyre (Cornell University), Veronica Marotta (University of Minnesota Twin Cities), Alessandro Acquisti (Carnegie Mellon University) | |
| 10 | An Economic Model for Quantum-Key Recovery Attacks | Ben Harsha (Purdue University), Jeremiah Blocki (Purdue University) | |
| 11 | Security-Induced Lock-In in the Cloud | Daniel Arce (UT Dallas) | |
| 12 | The Commodification of Consent | Daniel Woods (University of Innsbruck), Rainer Böhme (University of Innsbruck) | |
| 13 | The Use of Autonomous Decision Systems | Robin Dillon-Merrill (Georgetown), Peter Madsen (BYU), Bart Roets (INFRABEL), Taylan Topcu (Virginia Tech), Kostas Triantis (Virginia Tech) | |
| 14 | Understanding the Knowledge Gap: How Security Awareness Influences the Adoption of Industrial IoT | Verena Schrama (TU Delft), Carlos H. Gañán (TU Delft), Doris Aschenbrenner (TU Delft), Mark de Reuver (TU Delft), Kevin Borgolte (Princeton University), Tobias Fiebig (TU Delft) | |
| 15 | A Qualitative Model of Older Adults’ Contextual Decision-Making About Information Sharing | Alisa Frik (International Computer Science Institute, UC Berkeley), Julia Bernd (International Computer Science Institute, UC Berkeley), Serge Egelman (International Computer Science Institute, UC Berkeley) |
WEIS 2019
| Full name | The 18th Workshop on the Economics of Information Security |
|---|---|
| Dates | 2019-06-03 – 2019-06-04 |
| Location | Boston, Massachusetts, USA |
| Venue | Harvard School of Engineering and Applied Sciences, Maxwell Dworkin G-115 (Lessing Lecture Hall) |
| Website | https://weis2019.econinfosec.org/ |
| Papers | 24 (24 files available) |
WEIS 2018
| Full name | The 17th Workshop on the Economics of Information Security |
|---|---|
| Dates | 2018-06-18 – 2018-06-19 |
| Location | Innsbruck, Austria |
| Venue | Hotel Grauer Bär, Universitätsstraße 5-7, 6020 Innsbruck, Austria |
| Website | https://weis2018.econinfosec.org/ |
| Papers | 22 (22 files available) |
WEIS 2017
| Full name | The 16th Workshop on the Economics of Information Security |
|---|---|
| Dates | 2017-06-26 – 2017-06-27 |
| Location | La Jolla (San Diego), California, USA |
| Venue | Rady School of Management, UC San Diego — Wells Fargo Hall, room 1N108 |
| Website | https://weis2017.econinfosec.org/ |
| Papers | 25 (24 files available) |
WEIS 2016
| Full name | The 15th Workshop on the Economics of Information Security |
|---|---|
| Dates | 2016-06-13 – 2016-06-14 |
| Location | Berkeley, California, USA |
| Venue | Boalt Hall (UC Berkeley School of Law), room 110, 2778 Bancroft Way, Berkeley, CA 94704 |
| Website | https://weis2016.econinfosec.org/ |
| Local website copy | Browse the local copy |
| Papers | 21 (21 files available) |
WEIS 2015
| Full name | The 14th Workshop on the Economics of Information Security |
|---|---|
| Dates | 2015-06-22 – 2015-06-23 |
| Location | Delft, the Netherlands |
| Venue | TU Delft Science Center, Mijnbouwstraat 120, 2628RX Delft (policy panels on 24 June at The Hague Security Delta Campus) |
| Website | http://weis2015.econinfosec.org/ |
| Papers | 21 (21 files available) |
WEIS 2014
| Full name | The 13th Workshop on the Economics of Information Security |
|---|---|
| Dates | 2014-06-23 – 2014-06-24 |
| Location | State College, Pennsylvania, USA |
| Venue | Information Sciences and Technology (IST) Building, The Pennsylvania State University, University Park |
| Website | http://weis2014.econinfosec.org/ |
| Papers | 20 (20 files available) |
| # | Title | Authors | File |
|---|---|---|---|
| 1 | Understanding the Influence of Cybercrime Risk on the E-Service Adoption of European Internet Users | Markus Riek (University of Münster), Rainer Böhme (University of Münster), Tyler Moore (Southern Methodist University) | |
| 2 | Experimental Measurement of Attitudes Regarding Cybercrime | James Graves (Carnegie Mellon University), Alessandro Acquisti (Carnegie Mellon University), Ross Anderson (University of Cambridge) | |
| 3 | Privacy versus Government Surveillance: Where Network Effects Meet Public Choice | Ross Anderson (University of Cambridge) | |
| 4 | Government Surveillance and Incentives to Abuse Power | Paul Laskowski (UC Berkeley), Benjamin Johnson (Carnegie Mellon University), Thomas Maillart (UC Berkeley), John Chuang (UC Berkeley) | |
| 5 | Should Payment Card Issuers Reissue Cards in Response to a Data Breach? | James Graves (Carnegie Mellon University), Alessandro Acquisti (Carnegie Mellon University), Nicolas Christin (Carnegie Mellon University) | |
| 6 | Automation and Disruption in Stolen Payment Card Markets | Timothy Peacock (Shape Security), Allan Friedman (George Washington University) | |
| 7 | Defending Debit: A Historical Study of the Indirect Effects of the Durbin Amendment on Investment in Debit Card Security | Allison Miller (Electronic Arts) | |
| 8 | Empirically Characterizing Domain Abuse and the Revenue Impact of Blacklisting | Neha Chachra (UC San Diego), Damon McCoy (George Mason University), Stefan Savage (UC San Diego), Geoffrey M. Voelker (UC San Diego) | |
| 9 | A Study of Whois Privacy and Proxy Service Abuse | Richard Clayton (University of Cambridge), Tony Mansfield (National Physical Laboratory) | |
| 10 | Why Them? Extracting Intelligence about Target Selection from Zeus Financial Malware | Samaneh Tajalizadehkhoob (Delft University of Technology), Hadi Asghari (Delft University of Technology), Carlos Gañán (Delft University of Technology), Michel van Eeten (Delft University of Technology) | |
| 11 | The Effect of Decentralized Behavioral Decision Making on System-Level Risk | Kim Kaivanto (Lancaster University) | |
| 12 | Resilience in Information Stewardship | Christos Ioannidis (University of Bath), David Pym (University College London), Julian Williams (University of Durham), Iffat Gheyas (University of Durham) | |
| 13 | Competition in the Crypto-Currency Market | Neil Gandal (Tel Aviv University), Hanna Halaburda (Bank of Canada) | |
| 14 | Incentive Engineering for Outsourced Computation in the Face of Collusion | Mhr Khouzani (Royal Holloway - University of London), Viet Pham (Royal Holloway - University of London), Carlos Cid (Royal Holloway - University of London) | |
| 15 | Voluntary Participation in Cyber-Insurance Markets | Parinaz Naghizadeh (University of Michigan), Mingyan Liu (University of Michigan) | |
| 16 | On Decentralizing Prediction Markets and Order Books | Jeremy Clark (Concordia University), Joseph Bonneau (Princeton University), Edward Felten (Princeton University), Joshua Kroll (Princeton University), Andrew Miller (University of Maryland), Arvind Narayanan (Princeton University) | |
| 17 | Analysis of Japanese Loyalty Programs Considering Liquidity, Security Efforts, and Actual Security Levels | Bongkot Jenjarrussakul (University of Tokyo), Kanta Matsuura (University of Tokyo) | |
| 18 | Framing and the Malleability of Privacy Choices | Idris Adjerid (University of Notre Dame), Alessandro Acquisti (Carnegie Mellon University), George Loewenstein (Carnegie Mellon University) | |
| 19 | Meaningful Healthcare Security: Does "Meaningful-Use" Attestation Improve Information Security Performance? | Juhee Kwon (City University of Hong Kong), M. Eric Johnson (Vanderbilt University) | |
| 20 | Aiming at a More Cost-Efficient Census Via Online Data Collection: Privacy Trade-Offs of Geo-Location | Laura Brandimarte (Carnegie Mellon University), Alessandro Acquisti (Carnegie Mellon University) |
WEIS 2013
| Full name | The 12th Workshop on the Economics of Information Security |
|---|---|
| Dates | 2013-06-11 – 2013-06-12 |
| Location | Washington, D.C., USA |
| Venue | Rafik B. Hariri Building, Georgetown University (main campus) |
| Website | http://weis2013.econinfosec.org/ |
| Papers | 20 (20 files available) |
| # | Title | Authors | File |
|---|---|---|---|
| 1 | Sustainability in Information Stewardship: Time Preferences, Externalities, and Social Co-ordination | Christos Ioannidis (University of Bath), David Pym (University of Aberdeen), Julian Williams (University of Aberdeen) | |
| 2 | How Bad Is It? – A Branching Activity Model to Estimate the Impact of Information Security Breaches | Russell Thomas (George Mason University), Marcin Antkiewicz (Qualys, Inc.), Patrick Florer (Risk Centric Security, Inc.), Suzanne Widup (Verizon Communications, Inc.), Matthew Woodyard (Zions Bancorporation) | |
| 3 | Cloud Implications on Software Network Structure and Security Risks | Terrence August (University of California, San Diego, Rady School of Management), Marius Niculescu (Georgia Institute of Technology), Hyoduk Shin (University of California, San Diego, Rady School of Management) | |
| 4 | The More Social Cues, The Less Trolling? An Empirical Study of Online Commenting Behavior | Daegon Cho (Carnegie Mellon University), Alessandro Acquisti (Carnegie Mellon University) | |
| 5 | Consumer Flexibility, Data Quality and Targeted Pricing | Geza Sapi (Düsseldorf Institute for Competition Economics), Irina Suleymanova (Düsseldorf Institute for Competition Economics) | |
| 6 | Privacy Controls and Information Disclosure Behavior of Online Social Network Users | Huseyin Cavusoglu (University of Texas), Tuan Phan (National University of Singapore), Hasan Cavusoglu (University of British Columbia) | |
| 7 | The Value of Privacy in Web Search | Sören Preibusch (Microsoft Research Cambridge UK) | |
| 8 | Einstein on the Breach: Surveillance Technology, Cybersecurity, and Organizational Change | Andreas Kuehn (Syracuse University, School of Information Studies), Milton Mueller (Syracuse University, School of Information Studies) | |
| 9 | The Economics of Bitcoin Mining, or Bitcoin in the Presence of Adversaries | Joshua Kroll (Princeton University), Ian Davey (Princeton University), Edward Felten (Princeton University) | |
| 10 | On the Viability of Using Liability to Incentivise Internet Security | Huw Fryer (University of Southampton), Roksana Moore (University of Southampton), Tim Chown (University of Southampton) | |
| 11 | Improving Internet Security Through Social Information and Social Comparison: A Field Quasi-Experiment | Qian Tang (University of Texas at Austin), Leigh Linden (University of Texas at Austin), John Quarterman (Quarterman Creations), Andrew Whinston (University of Texas at Austin) | |
| 12 | Small World: Collisions Among Attacks in a Finite Population | Cormac Herley (Microsoft Research) | |
| 13 | A Behavioral Investigation of the FlipIt Game | Alan Nochenson (The Pennsylvania State University), Jens Grossklags (The Pennsylvania State University) | |
| 14 | Breaking Our Password Hash Habit: Why the Sharing of Users' Password Choices for Defensive Analysis Is an Underprovisioned Social Good, and What We Can Do to Encourage It | Cormac Herley (Microsoft Research), Stuart Schechter (Microsoft Research) | |
| 15 | Security Economics in the HTTPS Value Chain | Hadi Asghari (Delft University of Technology), Michel van Eeten (Delft University of Technology), Axel Arnbak (University of Amsterdam), Nico van Eijk (University of Amsterdam) | |
| 16 | Analyzing Incentives for Protocol Compliance in Complex Domains: A Case Study of Introduction-Based Routing | Michael Wellman (University of Michigan), Tae Hyung Kim (University of Michigan), Quang Duong (University of Michigan) | |
| 17 | Incentive Analysis of Bidirectional Filtering in the Internet | Mhr Khouzani (University of Southern California), Soumya Sen (Princeton University), Ness B. Shroff (The Ohio State University) | |
| 18 | Are They Actually Any Different? Comparing 3,422 Financial Institutions' Privacy Practices | Lorrie Cranor (Carnegie Mellon University), Kelly Idouchi (Carnegie Mellon University), Pedro Leon (Carnegie Mellon University), Blase Ur (Carnegie Mellon University), Manya Sleeper (Carnegie Mellon University) | |
| 19 | Data Harvesting 2.0: From the Visible to the Invisible Web | Claude Castelluccia (INRIA), Stephane Grumbach (INRIA), Lukasz Olejnik (INRIA) | |
| 20 | An Experiment in Hiring Discrimination via Online Social Networks | Alessandro Acquisti (Carnegie Mellon University), Christina Fong (Carnegie Mellon University) |
WEIS 2012
| Full name | The 11th Workshop on the Economics of Information Security |
|---|---|
| Dates | 2012-06-25 – 2012-06-26 |
| Location | Berlin, Germany |
| Venue | Berlin Brandenburg Academy of Sciences (BBAW), Jaegerstrasse 22-23, 10117 Berlin (entrance Markgrafenstrasse 38) |
| Website | http://weis2012.econinfosec.org/ |
| Papers | 22 (20 files available) |
| # | Title | Authors | File |
|---|---|---|---|
| 1 | Empirical Analysis of Data Breach Litigation | Sasha Romanosky (Carnegie Mellon University), David Hoffman (Temple University), Alessandro Acquisti (Carnegie Mellon University) | |
| 2 | Is Patient Data Better Protected in Competitive Healthcare Markets? | Martin S. Gaynor (Carnegie Mellon University), Muhammad Zia Hydari (Carnegie Mellon University), Rahul Telang (Carnegie Mellon University) | |
| 3 | The Privacy Economics of Voluntary Over-disclosure in Web Forms | Sören Preibusch (University of Cambridge), Kat Krol (University College London), Alastair R. Beresford (University of Cambridge) | |
| 4 | Security Resources, Capabilities and Cultural Values: Links to Security Performance and Compliance | Juhee Kwon (Dartmouth College), M. Eric Johnson (Dartmouth College) | |
| 5 | Software Security Economics: Theory, in Practice | Stephan Neuhaus (ETH Zürich), Bernhard Plattner (ETH Zürich) | |
| 6 | Sectoral and Regional Interdependency of Japanese Firms under the Influence of Information Security Risks | Bongkot Jenjarrussakul (University of Tokyo), Hideyuki Tanaka (University of Tokyo), Kanta Matsuura (University of Tokyo) | |
| 7 | Why Do Nigerian Scammers Say They Are From Nigeria? | Cormac Herley (Microsoft Research) | |
| 8 | Analysis of eCrime in Crowd-sourced Labor Markets: Mechanical Turk vs. Freelancer | Vaibhav Garg (Indiana University), Chris Kanich (UC San Diego), L. Jean Camp (Indiana University) | |
| 9 | Can We Afford Integrity by Proof-of-Work? Scenarios Inspired by the Bitcoin Currency | Jörg Becker (University of Münster), Dominic Breuker (University of Münster), Tobias Heide (University of Münster), Justus Holler (University of Münster), Hans Peter Rauer (University of Münster), Rainer Böhme (University of Münster) | |
| 10 | Measuring the Cost of Cybercrime | Ross Anderson (University of Cambridge), Chris Barton (Cloudmark), Rainer Böhme (University of Münster), Richard Clayton (University of Cambridge), Michel van Eeten (Delft University of Technology), Michael Levi (Cardiff University), Tyler Moore (Wellesley College), Stefan Savage (UC San Diego) | |
| 11 | A Closer Look at Information Security Costs | Matthias Brecht (University of Regensburg), Thomas Nowey (Krones AG) | |
| 12 | IT Security Investment and Gordon-Loeb's 1/e Rule | Yuliy Baryshnikov (University of Illinois at Urbana-Champaign) | |
| 13 | Who Sometimes Violates the Rule of the Organizations? An Empirical Study on Information Security Behaviors and Awareness | Toshihiko Takemura (Kansai University), Ayako Komatsu (Information Technology Promotion Agency, Japan) | |
| 14 | To Invest or Not to Invest? Assessing the Economic Viability of a Policy and Security Configuration Management Tool | Lukas Demetz (University of Innsbruck), Daniel Bachlechner (University of Innsbruck) | |
| 15 | Online Promiscuity: Prophylactic Patching and the Spread of Computer Transmitted Infections | Timothy Kelley (Indiana University), L. Jean Camp (Indiana University) | |
| 16 | Contagion in Cybersecurity Attacks | Adrian Baldwin (Hewlett-Packard Laboratories), Iffat Gheyas (University of Aberdeen), Christos Ioannidis (University of Bath), David Pym (University of Aberdeen), Julian Williams (University of Aberdeen) | |
| 17 | The Effect of Fraud Investigation Cost on Pay-Per-Click Advertising | Min Chen (Richard Stockton College of New Jersey), Varghese Jacob (University of Texas at Dallas), Suresh Radhakrishnan (University of Texas at Dallas), Young Ryu (University of Texas at Dallas) | |
| 18 | Ad-blocking Games: Monetizing Online Content Under the Threat of Ad Avoidance | Nevena Vratonjic (EPFL Lausanne), Mohammad Hossein Manshaei (Isfahan University of Technology, Iran), Jens Grossklags (Penn State University), Jean-Pierre Hubaux (EPFL Lausanne) | |
| 19 | Choice Architecture and Smartphone Privacy: There's a Price for That | Serge Egelman (UC Berkeley), Adrienne Porter Felt (UC Berkeley), David Wagner (UC Berkeley) | |
| 20 | Would You Sell Your Mother's Data? Personal Data Disclosure in a Simulated Credit Card Application | Miguel Malheiros (University College London), Sascha Brostoff (University College London), Charlene Jennett (University College London), Angela Sasse (University College London) | |
| 21 | 'Maybe We Spend Too Much?' | Bruce Schneier (BT Counterpane) | not available |
| 22 | 'No, We Don't Spend Enough!' | Ross Anderson (University of Cambridge) | not available |
WEIS 2011
| Full name | The 10th Workshop on the Economics of Information Security |
|---|---|
| Dates | 2011-06-14 – 2011-06-15 |
| Location | Fairfax, VA, USA |
| Venue | The Mason Inn Conference Center & Hotel, 4352 Mason Pond Drive, Fairfax, Virginia 22030 (George Mason University, Fairfax Campus) |
| Website | http://weis2011.econinfosec.org/ |
| Papers | 20 (19 files available) |
WEIS 2010
| Full name | The 9th Workshop on the Economics of Information Security |
|---|---|
| Dates | 2010-06-07 – 2010-06-08 |
| Location | Cambridge, MA, USA |
| Venue | Northwest Building, School of Engineering and Applied Sciences (SEAS), Harvard University, 52 Oxford Street, Cambridge, MA 02138 (reception: Maxwell Dworkin Building, 33 Oxford Street) |
| Website | http://weis2010.econinfosec.org/ (offline) |
| Local website copy | Browse the local copy (from the Wayback Machine) |
| Archive url | https://web.archive.org/web/20150815065631/http://weis2010.econinfosec.org/ |
| Papers | 24 (24 files available) |
| # | Title | Authors | File |
|---|---|---|---|
| 1 | Data Breaches and Identity Theft: When is Mandatory Disclosure Optimal? | Sasha Romanosky (Carnegie Mellon), Richard Sharp (Carnegie Mellon), Alessandro Acquisti (Carnegie Mellon) | |
| 2 | Encryption and Data Loss | Amalia R. Miller (MIT), Catherine Tucker (MIT) | |
| 3 | Market Impact on IT Security Spending | Bora Kolfal (Alberta), Raymond Patterson (Alberta), Lisa Yeo (Alberta) | |
| 4 | Outsourcing Information Security: Contracting Issues and Security Implications | Asunur Cezar, Huseyin Cavusoglu, Srinivasan Raghunathan | |
| 5 | Is the Internet for Porn? An Insight Into the Online Adult Industry | Gilbert Wondracek, Thorsten Holz, Christian Platzer, Engin Kirda, Christopher Kruegel | |
| 6 | Guns, Privacy, and Crime | Alessandro Acquisti (Carnegie Mellon), Catherine Tucker (MIT) | |
| 7 | Misplaced Confidences: Privacy and the Control Paradox | Laura Brandimarte (Carnegie Mellon), Alessandro Acquisti (Carnegie Mellon), George Loewenstein (Carnegie Mellon) | |
| 8 | A Welfare Analysis of Secondary Use of Personal Data | Nicola Jentzsch (German Institute for Economic Research) | |
| 9 | The password thicket: technical and market failures in human authentication on the web | Joseph Bonneau (Cambridge), Sören Preibusch (Cambridge) | |
| 10 | Please Continue to Hold: An empirical study on user tolerance of security delays | Serge Egelman, David Molnar, Nicolas Christin, Alessandro Acquisti, Cormac Herley, Shriram Krishnamurthi | |
| 11 | Inglourious Installers: Security in the Application Marketplace | Jonathan Anderson (Cambridge), Joseph Bonneau (Cambridge), Frank Stajano (Cambridge) | |
| 12 | Might Governments Clean-up Malware? | Richard Clayton (Cambridge) | |
| 13 | The Role of Internet Service Providers in Botnet Mitigation: An Empirical Analysis Based on Spam Data | Michel van Eeten, Johannes M. Bauer, Hadi Asghari, Shirin Tabatabaie, Dave Rand | |
| 14 | Security Games in Online Advertising: Can Ads Help Secure the Web? | Nevena Vratonjic, Jean-Pierre Hubaux, Maxim Raya, David Parkes | |
| 15 | Towards a Cooperative Defense Model Against Network Security Attacks | Harikrishna Narasimhan, Venkatanathan Varadarajan, Pandu Rangan Chandrasekaran | |
| 16 | The Changing Nature of US Card Payment Fraud: Issues for Industry and Public Policy | Richard J. Sullivan (Federal Reserve Bank of Kansas City) | |
| 17 | Information Security Policy in the U.S. Retail Payments Industry | Mark MacCarthy (Georgetown) | |
| 18 | Self Hosting vs. Cloud Hosting: Accounting for the security impact of hosting in the cloud | David Molnar (Microsoft Research), Stuart Schechter (Microsoft Research) | |
| 19 | Modeling Cyber-Insurance: Towards A Unifying Framework | Rainer Böhme (ICSI Berkeley), Galina Schwartz (ICSI Berkeley) | |
| 20 | The Plight of the Targeted Attacker in a World of Scale | Cormac Herley (Microsoft Research) | |
| 21 | On the Security Economics of Electricity Metering | Ross Anderson (Cambridge), Shailendra Fuloria (Cambridge) | |
| 22 | An Empirical Analysis of Exploitation Attempts based on Vulnerabilities in Open Source Software | Sam Ransbotham (Boston College) | |
| 23 | The Mathematics of Obscurity: On the Trustworthiness of Open Source | Hermann Härtig (TU Dresden), Claude-Joachim Hamann (TU Dresden), Michael Roitzsch (TU Dresden) | |
| 24 | Structured Systems Economics for Security Management | Adam Beautement (UCL), David Pym (Aberdeen) |
WEIS 2009
| Full name | The Eighth Workshop on the Economics of Information Security |
|---|---|
| Dates | 2009-06-24 – 2009-06-25 |
| Location | London, England |
| Venue | University College London |
| Website | http://weis09.infosecon.net/ |
| Papers | 21 (21 files available) |
| # | Title | Authors | File |
|---|---|---|---|
| 1 | Social Insecurity: The Unintended Consequences of Identity Fraud Prevention Policies | Alessandro Acquisti (Carnegie Mellon University), Ralph Gross (Carnegie Mellon University) | |
| 2 | Data Breaches and Identity Theft | William Roberds (Federal Reserve Bank of Atlanta), Stacey Schreft (The Mutual Fund Research Center, LLC) | |
| 3 | The Iterated Weakest Link - A Model of Adaptive Security Investment | Rainer Boehme (Technische Universitat Dresden), Tyler Moore (Harvard University) | |
| 4 | The Price of Uncertainty in Security Games | Jens Grossklags (UC Berkeley), Benjamin Johnson (Carnegie Mellon University, CyLab), Nicolas Christin (Carnegie Mellon University, CyLab) | |
| 5 | Nobody Sells Gold for the Price of Silver: Dishonesty, Uncertainty and the Underground Economy | Cormac Herley (Microsoft Research), Dinei Florencio (Microsoft Research) | |
| 6 | Cyber Attacks: Cross-Country Interdependence and Enforcement | Qiu-Hong Wang (University of Singapore), Seung-Hyun Kim (University of Singapore) | |
| 7 | The Impact of Relative Standards on Concern About Privacy | Alessandro Acquisti (Carnegie Mellon University), Leslie John (Carnegie Mellon University), George Loewenstein (Carnegie Mellon University) | |
| 8 | The Policy Maker's Anguish: regulating personal data behaviour between paradoxes and dilemmas | Ramón Compañó (European Commission Joint Research Centre IPTS), Wainer Lusoli (European Commission Joint Research Centre IPTS; Visiting Research Fellow, University of Chester) | |
| 9 | The Privacy Jungle: On the Market for Data Protection in Social Networks | Joseph Bonneau (University of Cambridge), Soren Preibusch (University of Cambridge) | |
| 10 | HIPAA Compliance: An Examination of Institutional and Market Forces | Ajit Appari (Tuck School of Business at Dartmouth), Denise Anthony (Department of Sociology, Dartmouth College), Eric Johnson (Tuck School of Business at Dartmouth) | |
| 11 | Valuating Privacy with Option Pricing Theory | Stefan Berthold (Technische Universitat Dresden), Rainer Boehme (Technische Universitat Dresden) | |
| 12 | Optimal Timing of Information Security Investment: A Real Options Approach | Ken-ichi Tatsumi (Gakushuin University), Makoto Goto (Waseda University) | |
| 13 | Security Economics and Critical National Infrastructure | Ross Anderson (University of Cambridge), Shailendra Fuloria (University of Cambridge) | |
| 14 | Internet Multi-Homing Problems: Explanations from Economics | Richard Clayton (University of Cambridge) | |
| 15 | The Impact of Information Security Ratings on Vendor Competition | Zach Zhou (Dartmouth College), M. Eric Johnson (Dartmouth College) | |
| 16 | The Risk of Risk Analysis-And its relation to the Economics of Insider Threats | Christian W Probst (Technical University of Denmark), Jeffrey Hunker (Carnegie Mellon University) | |
| 17 | Competitive Cyber-Insurance and Internet Security | Nikhil Shetty (UC Berkeley), Galina Schwartz (UC Berkeley), Mark Felegyhazi (ICSI Berkeley), Jean Walrand (UC Berkeley) | |
| 18 | Potential Rating Indicators for Cyberinsurance: An Exploratory Qualitative Study | Frank Innerhofer-Oberperfler (Research Group Quality Engineering, Institute of Computer Science, University of Innsbruck), Ruth Breu (Research Group Quality Engineering, Institute of Computer Science, University of Innsbruck) | |
| 19 | Economics of Malware: Epidemic Risks Model, Network Externalities and Incentives | Marc LeLarge (INRIA-ENS) | |
| 20 | Modeling the economic incentives of DDoS attacks: femtocell case study | Vicente Segura (Telefónica I+D), Javier Lahuerta (Telefónica I+D) | |
| 21 | Modelling the Security Ecosystem- The Dynamics of (In)Security | Stefan Frei (ETH Zurich), Dominik Schatzmann (ETH Zurich), Bernhard Plattner (ETH Zurich), Brian Trammell (Hitachi Europe) |
WEIS 2008
| Full name | The Seventh Workshop on the Economics of Information Security |
|---|---|
| Dates | 2008-06-25 – 2008-06-28 |
| Location | Hanover, NH, USA |
| Venue | Tuck School of Business at Dartmouth College (Spanos Auditorium, Room 100, Cummings Hall) |
| Website | http://weis2008.econinfosec.org/ (offline) |
| Local website copy | Browse the local copy (from the Wayback Machine) |
| Archive url | https://web.archive.org/web/20090602162456/http://weis2008.econinfosec.org/index.htm |
| Papers | 22 (22 files available) |
| # | Title | Authors | File |
|---|---|---|---|
| 1 | Nonbanks and Risk in Retail Payments | Stuart Weiner (Federal Reserve Bank-Kansas City), Richard Sullivan (Federal Reserve Bank-Kansas City) (presenter), Simonetta Rosati (European Central Bank) | |
| 2 | Do Data Breach Disclosure Laws Reduce Identity Theft? | Sasha Romanosky (Carnegie Mellon University) (presenter), Rahul Telang (Carnegie Mellon University), Alessandro Acquisti (Carnegie Mellon University) | |
| 3 | Security Economics and European Policy | Ross Anderson (University of Cambridge), Rainer Boehme (Dresden University of Technology), Richard Clayton (University of Cambridge), Tyler Moore (University of Cambridge) (presenter) | |
| 4 | Security Investment (Failures) in Five Economic Environments: A Comparison of Homogeneous and Heterogeneous User Agents | Jens Grossklags (UC Berkeley) (presenter), Nicolas Christin (Carnegie Mellon University), John Chuang (School of Information, UC Berkeley) | |
| 5 | BORIS – Business-Oriented Management of Information Security | Sebastian Sowa (Ruhr-University of Bochum) (presenter), Lampros Tsinas (Munich Re), Roland Gabriel (Ruhr-University of Bochum) | |
| 6 | Productivity Space of Information Security in an Extension of the Gordon-Loeb's Investment Model | Kanta Matsuura (The University of Tokyo) (presenter) | |
| 7 | Communicating the Economic Value of Security Investments; Value at Security Risk | Rolf Hulthén (TeliaSonera AB) (presenter) | |
| 8 | Modelling the Human and Technological Costs and Benefits of USB Memory Stick Security | Adam Beautement (UCL), Robert Coles (Merrill Lynch), Jonathan Griffin (HP Labs), Christos Ioannidis (University of Bath), Brian Monahan (HP Labs), David Pym (HP Labs and University of Bath) (presenter), Angela Sasse (UCL), Mike Wonham (HP Labs) | |
| 9 | Information Governance: Flexibility and Control through Escalation and Incentives | Xia Zhao (Dartmouth College) (presenter), Eric Johnson (Dartmouth College) | |
| 10 | Firms' Optimal Digital Rights Management (DRM) Strategies: The Effects of Public Copy Protection and DRM Compatibility | Sang Hoo Bae (Clark University) (presenter), Pilsik Choi (Clark University) | |
| 11 | Diffusion and Adoption of IPv6 in the United States | Hillary Elmore (Indiana University Bloomington), L. Jean Camp (Indiana University Bloomington) (presenter), Brandon Stephens (Indiana University Bloomington) | |
| 12 | Reinterpreting the Disclosure Debate for Web Infections | Oliver Day (Harvard University), Rachel Greenstadt (Harvard University) (presenter), Brandon Palmen (Harvard University) | |
| 13 | The Impact of Incentives on Notice and Take-down | Tyler Moore (University of Cambridge) (presenter), Richard Clayton (University of Cambridge) | |
| 14 | Studying Malicious Websites and the Underground Economy on the Chinese Web | Jianwei Zhuge (Peking University), Thorsten Holz (University of Mannheim), Chengyu Song (Peking University) (presenter), Jinpeng Guo (Peking University), Xinhui Han (Peking University), Wei Zou (Peking University) | |
| 15 | Botnet Economics: Uncertainty Matters | Zhen Li (Albion College), Qi Liao (University of Notre Dame) (presenter), Aaron Striegel (University of Notre Dame) | |
| 16 | The Impact of Information Disclosure on Stock Market Returns: The Sarbanes-Oxley Act and the Role of Media as an Information Intermediary | Karthik Balakrishnan (NYU Stern School), Anindya Ghose (NYU Stern School) (presenter), Panos Ipeirotis (NYU Stern School) | |
| 17 | Reading the Disclosures with New Eyes: Bridging the Gap between Information Security Disclosures and Incidents | Ta-Wei Wang (Purdue University) (presenter), Jackie Rees (Purdue University), Karthik Kannan (Purdue University) | |
| 18 | Cyber Insurance as an Incentive for IT Security | Jean Bolot (Sprint), Marc Lelarge (INRIA-ENS) (presenter) | |
| 19 | The Economics of Covert Community Detection and Hiding | Shishir Nagaraja (University of Cambridge) (presenter) | |
| 20 | Conformity or Diversity: Social Implications of Transparency in Personal Data Processing | Rainer Böhme (TU Dresden) (presenter) | |
| 21 | Is Distributed Trust More Trustworthy? | Kurt Nielsen (University of Copenhagen) (presenter) | |
| 22 | Competition for Information under Privacy Concerns | Ramnath Chellappa (Emory University) (presenter), Raymond Sin (Hong Kong University of Science and Technology) |
WEIS 2007
| Full name | The Sixth Workshop on the Economics of Information Security |
|---|---|
| Dates | 2007-06-07 – 2007-06-08 |
| Location | Pittsburgh, PA, USA |
| Venue | Carnegie Mellon University (Collaborative Innovation Center, Room 1201) |
| Website | http://weis2007.econinfosec.org/ (offline) |
| Local website copy | Browse the local copy (from the Wayback Machine) |
| Papers | 28 (25 files available) |
| # | Title | Authors | File |
|---|---|---|---|
| 1 | The legitimate vulnerability market: the secretive world of 0-day exploit sales | Charles Miller (Independent Security Evaluators) | |
| 2 | Inadvertent Disclosure - Information Leaks in the Extended Enterprise | M. Eric Johnson (Dartmouth College), Scott Dynes (Dartmouth College) | |
| 3 | Network Security: Vulnerabilities and Disclosure Policy | Jay Pil Choi (Michigan State University), Chaim Fershtman (Tel Aviv University), Neil Gandal (Tel Aviv University) | DOC |
| 4 | The Countervailing Incentive of Restricted Patch Distribution: Economic and Policy Implications | Mohammad S. Rahman (Purdue University), Karthik Kannan (Purdue University), Mohit Tawarmalani (Purdue University) | |
| 5 | On the Viability of Privacy-Enhancing Technologies in a Self-Regulated Business-to-Consumer Market: Will Privacy Remain a Luxury Good? | Rainer Böhme (Technische Universität Dresden), Sven Koble (Technische Universität Dresden) | |
| 6 | When 25 Cents is too much: An Experiment on Willingness-To-Sell and Willingness-To-Protect Personal Information | Jens Grossklags (University of California at Berkeley), Alessandro Acquisti (Carnegie Mellon University) | |
| 7 | Optimally Securing Enterprise Information Systems and Assets | Vineet Kumar (Carnegie Mellon University), Rahul Telang (Carnegie Mellon University), Tridas Mukhopadhyay (Carnegie Mellon University) | |
| 8 | Interdependence of Reliability and Security | Peter Honeyman (University of Michigan), Galina A. Schwartz (University of California Berkeley), Ari Van Assche (HEC Montréal) | |
| 9 | A Framework for Classifying and Comparing Models of Cyber Security Investment to Support Policy and Decision-Making | Rachel Rue (RAND Corporation), Shari Lawrence Pfleeger (RAND Corporation), David Ortiz (RAND Corporation) | |
| 10 | Growth and sustainability of MSSP networks | Alok Gupta (University of Minnesota), Dmitry Zhdanov (University of Minnesota) | |
| 11 | Will Outsourcing IT Security Lead to a Higher Social Level of Security? | Brent Rowe (RTI International) | |
| 12 | Measuring Security Investment Benefit for Off the Shelf Software Systems - A Stakeholder Value Driven Approach | Yue Chen (University of Southern California), Barry Boehm (University of Southern California), Luke Sheppard (University of Southern California) | |
| 13 | Incentive Design for Free but No Free Disposal Services: The Case of Personalization under Privacy Concerns | Ramnath K. Chellappa (Emory University Atlanta), Shivendu Shivendu (University of Southern California) | |
| 14 | The Effect of Online Privacy Information on Purchasing Behavior: An Experimental Study | Janice Tsai (Carnegie Mellon University), Serge Egelman (Carnegie Mellon University), Lorrie Cranor (Carnegie Mellon University), Alessandro Acquisti (Carnegie Mellon University) | |
| 15 | Economics of User Segmentation, Profiling, and Detection in Security | Srinivasan Raghunathan (The University of Texas at Dallas), Huseyin Cavusoglu (The University of Texas at Dallas), Byungwan Koh (The University of Texas at Dallas), Bin Mai (Northwestern State University) | DOC |
| 16 | The Deterrent Effect of Enforcement Against Computer Hackers: Cross-Country Evidence | Ivan Png (National University of Singapore), Chen Yu Wang (National University of Singapore) | |
| 17 | An Empirical Analysis of the Current State of Phishing Attack and Defence | Tyler Moore (University of Cambridge), Richard Clayton (University of Cambridge) | |
| 18 | Privacy, Network Effects and Electronic Medical Record Technology Adoption | Amalia R. Miller (University of Virginia), Catherine E. Tucker (MIT) | |
| 19 | Writing an economics paper - A tutorial for information security experts | Neil Gandal (Tel Aviv University) | |
| 20 | Assessing the Value of Investments in Network Security Operations: A Systems Analytics Approach | Jonathan Griffin (HP Laboratories), Brian Monahan (HP Laboratories), David Pym (HP Laboratories), Mike Wonham (HP Laboratories), Mike Yearworth (HP Laboratories) | |
| 21 | The Gordon-Loeb Investment Model Generalized: Time Dependent Multiple Threats and Breach Losses over an Investment Period | Rolf Hulthen (TeliaSonera) | not available |
| 22 | An Uneasy Relationship: Cyber Security Information Sharing, Communications Privacy, and the Boundaries of the Firm | Aaron Burstein (University of California, Berkeley) | |
| 23 | Hiding, Seeking, and the Evolution of Privacy Behavior | Stefan Dodds (Carleton University) | not available |
| 24 | A Reputation Mechanism for Software Vulnerability Disclosure and Patch Release | Xia Zhao (University of Texas at Austin), Jianqing Chen (University of Texas at Austin), Andrew B. Whinston (University of Texas at Austin) | |
| 25 | A Survival Analysis of Disclosed Security Breaches | Xiaodong Jin, Dan Yomine | not available |
| 26 | Mental Models of Computer Security Risks | Farzaneh Asgharpour (Indiana University), Debin Liu (Indiana University), L. Jean Camp (Indiana University) | |
| 27 | Cyber-Insurance: Copula Pricing Framework and Implications for Risk Management | Hemantha S. B. Herath (Brock University), Tejaswini C. Herath (University at Buffalo) | |
| 28 | Strategic Defense and Attack of Complex Networks | Kjell Hausken (University of Stavanger) | DOC |
WEIS 2006
| Full name | The Fifth Workshop on the Economics of Information Security |
|---|---|
| Dates | 2006-06-26 – 2006-06-28 |
| Location | Cambridge, England, UK |
| Venue | Robinson College, University of Cambridge |
| Website | http://weis2006.econinfosec.org/ |
| Papers | 30 (30 files available) |
WEIS 2005
| Full name | Fourth Workshop on the Economics of Information Security |
|---|---|
| Dates | 2005-06-02 – 2005-06-03 |
| Location | Cambridge, Massachusetts, USA |
| Venue | John F. Kennedy School of Government, Harvard University |
| Website | http://infosecon.net/workshop/ |
| Papers | 38 (38 files available) |
WEIS 2004
| Full name | The Third Annual Workshop on Economics and Information Security |
|---|---|
| Dates | 2004-05-13 – 2004-05-14 |
| Location | Minneapolis, Minnesota, USA |
| Venue | Walter Library (Rooms 401-402), University of Minnesota |
| Website | http://www.dtc.umn.edu/weis2004/ (offline) |
| Local website copy | Browse the local copy (from the Wayback Machine) |
| Papers | 19 (18 files available) |
WEIS 2003
| Full name | 2nd Annual Workshop on Economics and Information Security |
|---|---|
| Dates | 2003-05-29 – 2003-05-30 |
| Location | College Park, Maryland, USA |
| Venue | Robert H. Smith School of Business, University of Maryland, 1412 Van Munching Hall, Rouse Room |
| Website | http://www.cpppe.umd.edu/rhsmith3/ (offline) |
| Local website copy | Browse the local copy (from the Wayback Machine) |
| Papers | 17 (17 files available) |
| # | Title | Authors | File |
|---|---|---|---|
| 1 | Cryptology and Competition Policy - Issues with 'Trusted Computing' | Ross Anderson (University of Cambridge) | |
| 2 | How Much is Stronger DRM Worth? | Stephen R. Lewis (University of Cambridge) | |
| 3 | Trusted Computing, Peer-to-Peer Distribution, and the Economics of Pirated Entertainment | Stuart E. Schechter (Harvard University), Rachel A. Greenstadt (Harvard University), Michael D. Smith (Harvard University) | |
| 4 | Quantifying the Value of IT Security Mechanisms and Setting Up an Effective Security Architecture | Huseyin Cavusoglu (University of Texas at Dallas), Srinivasan Raghunathan (University of Texas at Dallas), Birendra Mishra (University of Texas at Dallas) | |
| 5 | Evaluating Damages Caused By Information Systems Security Incidents | Fariborz Farahmand (Georgia Institute of Technology), Shamkant B. Navathe (Georgia Institute of Technology), Gunter P. Sharp (Georgia Institute of Technology), Philip H. Enslow (Georgia Institute of Technology) | |
| 6 | The Paradoxical Value of Privacy | Paul Syverson (Naval Research Laboratory) | |
| 7 | Why We Can't be Bothered to Read Privacy Policies: Models of Privacy Economics as a Lemons Market | Tony Vila (Harvard University), Rachel Greenstadt (Harvard University), David Molnar (Harvard University) | |
| 8 | Paying for Privacy: Consumers and Infrastructures | Adam Shostack (Informed Security) | |
| 9 | Losses, Gains, and Hyperbolic Discounting: An Experimental Approach to Information Security Attitudes and Behaviors | Alessandro Acquisti (University of California, Berkeley), Jens Grossklags (University of California, Berkeley) | |
| 10 | Making Security Manifest | Allan Friedman (Harvard University), L. Jean Camp (Harvard University) | |
| 11 | Evaluating Security Systems: A Five-Step Process | Bruce Schneier (Counterpane Internet Security) | |
| 12 | The Economic Consequences of Sharing Security Information | Esther Gal-Or (University of Pittsburgh), Anindya Ghose (Carnegie Mellon University) | |
| 13 | Economic Aspects of Controlling Capital Investments in Cyberspace Security for Critical Infrastructure Assets | Lawrence A. Gordon (University of Maryland), Martin P. Loeb (University of Maryland), William Lucyshyn (Defense Advanced Research Projects Agency and University of Maryland) | |
| 14 | Interfering in e-Contracting | Patrick Legros (Université Libre de Bruxelles), Andrew F. Newman (Institute for Advanced Study, Princeton University and University College London) | |
| 15 | Security and Lock-In: The Case of the U.S. Cable Industry | Tom Lookabaugh (University of Colorado), Douglas C. Sicker (University of Colorado) | |
| 16 | We Want Security But We Hate It. The Foundations of Security Technoeconomics in the Social World | Mauro Sandrini (Teramo University) | |
| 17 | How and Why More Secure Technologies Succeed in Legacy Markets: Lessons from the Success of SSH | Nicholas Rosasco (University of Maryland, Baltimore County), David Larochelle (University of Virginia) |
WEIS 2002
| Full name | Workshop on Economics and Information Security |
|---|---|
| Dates | 2002-05-16 – 2002-05-17 |
| Location | Berkeley, California, USA |
| Venue | School of Information Management and Systems (SIMS), University of California, Berkeley |
| Website | http://www2.sims.berkeley.edu/resources/affiliates/workshops/econsecurity/ (offline) |
| Local website copy | Browse the local copy (from the Wayback Machine) |
| Papers | 26 (26 files available) |