Basuchoudhary, Atin and Searle, Nicola. 2019. Snatched secrets: Cybercrime and trade secrets modelling a firm's decision to report a theft of trade secrets. Computers & Security, 87, 101591. ISSN 0167-4048 [Article]

	Text Snatched Secrets R&R submission C&S .pdf - Accepted Version Permissions: Administrator Access Only Download (815kB)
Preview	Text 1-s2.0-S0167404819300616-main.pdf - Published Version Available under License Creative Commons Attribution. Download (995kB) | Preview

Abstract or Description

Cybercrime and economic espionage are increasing problems for firms. We build on US FBI policy to frame the interaction between a cybercrime victim firm and a government security agency. We bring together several strands in the literature to model the strategies of the firm, which has suffered a cyber breach and theft of trade secrets, and the government security agency, which must investigate and prosecute crimes. We investigate the interactions between these two players, in which the firm has private information about its cybersecurity investment. This investment level is unknown to the security agency, which must nonetheless decide how to prioritize reported crime. We model this asymmetric information problem within a game theoretic signaling framework derived from Becker's work in crime and punishment. We suggest that such a framework can inform policy to encourage security investments by firms and more efficient resource utilization by security agencies. We particularly focus on an illustrative stylized example to highlight how our modelling approach can be helpful. In this example we compare two worlds; one where all security breaches become public knowledge and another where only reported breaches become public knowledge. We then formulate two potentially testable Hypotheses and several implications of these Hypotheses. Case studies and a policy analysis further highlight how our framework plays out in reality.

Item Type:	Article
Identification Number (DOI):	https://doi.org/10.1016/j.cose.2019.101591
Additional Information:	Nicola Searle's participation is supported by the Engineering & Physical Science Research Council (EPSRC) Grant EP/P005039/1, Economic Espionage and Cybercrime: Evidence and Strategy.
Keywords:	Cyber security, Cybercrime, Trade secrets, Economic espionage, Cyber breaches
Departments, Centres and Research Units:	Institute for Cultural and Creative Entrepreneurship (ICCE)
Dates:	Date Event 8 August 2019 Accepted 8 August 2019 Published Online November 2019 Published
Item ID:	26749
Date Deposited:	13 Aug 2019 13:30
Last Modified:	03 Aug 2021 18:01
Peer Reviewed:	Yes, this version has been peer-reviewed.
URI:	https://research.gold.ac.uk/id/eprint/26749

View statistics for this item...

Edit Record (login required)