WHO CAN WE TRUST? : THE INFLUENCE OF INSIDER THREATS ON IS SECURITY INVESTMENTS

摘要

This paper proposes a game theoretical model to study the influence of insider threats on IS security investments. Using the game theory approach, we show that the optimal investment required to protect an information systems infrastructure from insiders is several magnitudes higher than for protecting against common hackers.