Effect of security investment strategy on the business value of managed security service providers

被引：9
|
作者：
Feng, Nan [1 ]
Wang, Meiyun [1 ]
Li, Minqiang [1 ]
Li, Dahui [2 ]
机构：
[1] Tianjin Univ, Coll Management & Econ, Tianjin 300072, Peoples R China
[2] Univ Minnesota Duluth, Labovitz Sch Business & Econ, Duluth, MN 55812 USA
来源：
ELECTRONIC COMMERCE RESEARCH AND APPLICATIONS | 2019年 / 35卷
基金：
中国国家自然科学基金;
关键词：
Managed security service; Security investment; Business value; System dynamics; INFORMATION-SECURITY; E-COMMERCE; DYNAMICS; MODEL; RETURNS; SYSTEMS; GAME;
D O I：
10.1016/j.elerap.2019.100843
中图分类号：
F [经济];
学科分类号：
02 ;
摘要：
Managed security service providers (MSSPs) have long provided clients with cost-effective methods and professional solutions for addressing issues related to information security. MSSPs provide three categories of security services, namely, prevention, detection, and response, to satisfy their clients' security requirements and realize business value. This study develops a system dynamics model of the correlation between the security investment strategies of an MSSP and the effect of its business value. Simulations under opportunistic and targeted attacks are performed to discuss the effects of the various security investment strategies of an MSSP on its business value. The study results indicate that investing in prevention has a stronger effect on the business value of an MSSP than investing in detection and response and that security investments on opportunistic attacks are more efficient than those on targeted attacks. Sensitivity analysis shows the robustness of the system dynamics model proposed in this study.
引用
收藏
页数：16
相关论文
共 50 条
  • [1] Outsourcing Internet security: Economic analysis of incentives for managed security service providers
    Ding, W
    Yurcik, W
    Yin, XX
    INTERNET AND NETWORK ECONOMICS, PROCEEDINGS, 2005, 3828 : 947 - 958
  • [2] An analysis of ISPs' role as managed security service providers (MSSPs)
    Choi, YS
    Seo, DI
    7th International Conference on Advanced Communication Technology, Vols 1 and 2, Proceedings, 2005, : 624 - 626
  • [3] Cross-Network Behavioral Clustering for Managed Security Service Providers
    Gkroumas, Georgios
    Kotinas, Ilias
    Giotis, Kostas
    Tsigkritis, Theocharis
    Mennigkas, Paris
    2018 14TH INTERNATIONAL CONFERENCE ON NETWORK AND SERVICE MANAGEMENT (CNSM), 2018, : 37 - 44
  • [4] Information Security Risks and Managed Security Service
    Navarro, Luis
    Information Security Technical Report, 2001, 6 (03): : 28 - 36
  • [5] Security analysis and investment strategy
    Bilson, Chris
    ECONOMIC RECORD, 2007, 83 (261) : 232 - 233
  • [6] Service providers: the gatekeepers of Internet security
    Newman S.
    2017, Elsevier Ltd (2017) : 5 - 7
  • [7] MANAGED SECURITY SERVICE DISTRIBUTION MODEL
    Ducatel, Gery
    Daniel, Joshua
    Dimitrakos, Theo
    El-Moussa, Fadi
    Rowlingson, Robert
    Sajjad, Ali
    PROCEEDINGS OF 2016 4TH IEEE INTERNATIONAL CONFERENCE ON CLOUD COMPUTING AND INTELLIGENCE SYSTEMS (IEEE CCIS 2016), 2016, : 404 - 408
  • [8] Assessing the Security Posture of Cloud Service Providers
    Rivera, Jorge
    Yu, Huiming
    Williams, Ken
    Zhan, Justin
    Yuan, Xiaohong
    PROCEEDINGS OF THE 5TH INTERNATIONAL CONFERENCE ON IS MANAGEMENT AND EVALUATION (ICIME 2015), 2015, : 103 - 110
  • [9] SECURITY PURCHASES OF SMALL BUSINESS INVESTMENT COMPANIES
    CHOATE, A
    JOURNAL OF FINANCE, 1961, 16 (02): : 304 - 312
  • [10] The Safety and Security of International Trade as a Determinant of the Business Strategy of the Polish Customs Service
    Grotteli, Monika
    EUROPEAN INTEGRATION STUDIES, 2015, (09) : 139 - 154
12345