Investing in Prevention or Paying for Recovery - Attitudes to Cyber Risk
Broadly speaking an individual can invest time and effort to avoid becoming victim to a cyber attack and/or they can invest resource in recovering from any attack. We introduce a new game called the pre-vention and recovery game to study this trade-off. We report results from the experimental lab that allow us to categorize different approaches to risk taking. We show that many individuals appear relatively risk loving in that they invest in recovery rather than prevention. We find little difference in behavior between a gain and loss framing.
The file attached to this record is the author's final peer reviewed version. The Publisher's final version can be found by following the DOI link.
Citation : Cartwright, A., Cartwright, E. and Xue, L. (2019) Investing in Prevention or Paying for Recovery - Attitudes to Cyber Risk. Conference on Decision and Game Theory for Security GameSec 2019, Stockholm, Sweden, October 31st - Novermber 01st 2019.
Research Institute : Institute for Applied Economics and Social Value (IAESV)
Peer Reviewed : Yes