{"id":"https://openalex.org/W2045006695","doi":"https://doi.org/10.2753/mis0742-1222250211","title":"Decision-Theoretic and Game-Theoretic Approaches to IT Security Investment","display_name":"Decision-Theoretic and Game-Theoretic Approaches to IT Security Investment","publication_year":2008,"publication_date":"2008-09-01","ids":{"openalex":"https://openalex.org/W2045006695","doi":"https://doi.org/10.2753/mis0742-1222250211","mag":"2045006695"},"language":"en","primary_location":{"id":"doi:10.2753/mis0742-1222250211","is_oa":false,"landing_page_url":"https://doi.org/10.2753/mis0742-1222250211","pdf_url":null,"source":{"id":"https://openalex.org/S9954729","display_name":"Journal of Management Information Systems","issn_l":"0742-1222","issn":["0742-1222","1557-928X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320547","host_organization_name":"Taylor & Francis","host_organization_lineage":["https://openalex.org/P4310320547"],"host_organization_lineage_names":["Taylor & Francis"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Management Information Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5071890322","display_name":"Huseyin Cavusoglu","orcid":"https://orcid.org/0000-0002-7982-3602"},"institutions":[{"id":"https://openalex.org/I182980787","display_name":"University of Dallas","ror":"https://ror.org/00v3ak792","country_code":"US","type":"education","lineage":["https://openalex.org/I182980787"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Huseyin Cavusoglu","raw_affiliation_strings":["a  School of Management, University of Texas, Dallas","School of Management, University of Texas, Dallas"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"a  School of Management, University of Texas, Dallas","institution_ids":[]},{"raw_affiliation_string":"School of Management, University of Texas, Dallas","institution_ids":["https://openalex.org/I182980787"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001222231","display_name":"Srinivasan Raghunathan","orcid":"https://orcid.org/0000-0002-2782-3520"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Srinivasan Raghunathan","raw_affiliation_strings":["b  University of Texas, Dallas"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"b  University of Texas, Dallas","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5084398278","display_name":"Wei Thoo Yue","orcid":"https://orcid.org/0000-0002-1344-153X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wei T. Yue","raw_affiliation_strings":["b  University of Texas, Dallas"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"b  University of Texas, Dallas","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":31.7741,"has_fulltext":false,"cited_by_count":236,"citation_normalized_percentile":{"value":0.99477134,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"25","issue":"2","first_page":"281","last_page":"304"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9926999807357788,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9811000227928162,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/hacker","display_name":"Hacker","score":0.902312695980072},{"id":"https://openalex.org/keywords/stochastic-game","display_name":"Stochastic game","score":0.642471194267273},{"id":"https://openalex.org/keywords/game-theory","display_name":"Game theory","score":0.5826853513717651},{"id":"https://openalex.org/keywords/investment","display_name":"Investment (military)","score":0.5038620829582214},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.4623374342918396},{"id":"https://openalex.org/keywords/complete-information","display_name":"Complete information","score":0.42575305700302124},{"id":"https://openalex.org/keywords/decision-theory","display_name":"Decision theory","score":0.41611990332603455},{"id":"https://openalex.org/keywords/economics","display_name":"Economics","score":0.4068654477596283},{"id":"https://openalex.org/keywords/microeconomics","display_name":"Microeconomics","score":0.3644128143787384},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3312359154224396},{"id":"https://openalex.org/keywords/law","display_name":"Law","score":0.09329897165298462}],"concepts":[{"id":"https://openalex.org/C86844869","wikidata":"https://www.wikidata.org/wiki/Q2798820","display_name":"Hacker","level":2,"score":0.902312695980072},{"id":"https://openalex.org/C22171661","wikidata":"https://www.wikidata.org/wiki/Q1074380","display_name":"Stochastic game","level":2,"score":0.642471194267273},{"id":"https://openalex.org/C177142836","wikidata":"https://www.wikidata.org/wiki/Q44455","display_name":"Game theory","level":2,"score":0.5826853513717651},{"id":"https://openalex.org/C27548731","wikidata":"https://www.wikidata.org/wiki/Q88272","display_name":"Investment (military)","level":3,"score":0.5038620829582214},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4623374342918396},{"id":"https://openalex.org/C113336015","wikidata":"https://www.wikidata.org/wiki/Q574010","display_name":"Complete information","level":2,"score":0.42575305700302124},{"id":"https://openalex.org/C28901747","wikidata":"https://www.wikidata.org/wiki/Q177571","display_name":"Decision theory","level":2,"score":0.41611990332603455},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.4068654477596283},{"id":"https://openalex.org/C175444787","wikidata":"https://www.wikidata.org/wiki/Q39072","display_name":"Microeconomics","level":1,"score":0.3644128143787384},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3312359154224396},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.09329897165298462},{"id":"https://openalex.org/C94625758","wikidata":"https://www.wikidata.org/wiki/Q7163","display_name":"Politics","level":2,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.2753/mis0742-1222250211","is_oa":false,"landing_page_url":"https://doi.org/10.2753/mis0742-1222250211","pdf_url":null,"source":{"id":"https://openalex.org/S9954729","display_name":"Journal of Management Information Systems","issn_l":"0742-1222","issn":["0742-1222","1557-928X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320547","host_organization_name":"Taylor & Francis","host_organization_lineage":["https://openalex.org/P4310320547"],"host_organization_lineage_names":["Taylor & Francis"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Management Information Systems","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.5199999809265137,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":33,"referenced_works":["https://openalex.org/W908949","https://openalex.org/W14702740","https://openalex.org/W17195039","https://openalex.org/W77047371","https://openalex.org/W110993677","https://openalex.org/W166429339","https://openalex.org/W1501321335","https://openalex.org/W1525451939","https://openalex.org/W1539813294","https://openalex.org/W1566395412","https://openalex.org/W1605188341","https://openalex.org/W1947367606","https://openalex.org/W1965895325","https://openalex.org/W1968274760","https://openalex.org/W1968294394","https://openalex.org/W1983203912","https://openalex.org/W1996529355","https://openalex.org/W2056075452","https://openalex.org/W2075988797","https://openalex.org/W2077250956","https://openalex.org/W2096830520","https://openalex.org/W2098201434","https://openalex.org/W2102144719","https://openalex.org/W2131951904","https://openalex.org/W2144958981","https://openalex.org/W2146016067","https://openalex.org/W2147409175","https://openalex.org/W2156284882","https://openalex.org/W2167474990","https://openalex.org/W2369295637","https://openalex.org/W2403410015","https://openalex.org/W3125210271","https://openalex.org/W3158747908"],"related_works":["https://openalex.org/W2921504876","https://openalex.org/W1982580243","https://openalex.org/W1968789091","https://openalex.org/W3122268488","https://openalex.org/W2389688028","https://openalex.org/W2809993628","https://openalex.org/W2098201434","https://openalex.org/W1501451659","https://openalex.org/W1551148737","https://openalex.org/W39774951"],"abstract_inverted_index":{"Firms":[0],"have":[1],"been":[2],"increasing":[3],"their":[4,59],"information":[5],"technology":[6],"(IT)":[7],"security":[8,15,26,40,76],"budgets":[9],"significantly":[10],"to":[11,38,64,111,161,183,232],"deal":[12],"with":[13],"increased":[14],"threats.":[16],"An":[17],"examination":[18],"of":[19,53,149,177,199,211,216],"current":[20],"practices":[21],"reveals":[22],"that":[23,47,102,116,138,169],"managers":[24],"view":[25],"investment":[27,67,77,93],"as":[28,91],"any":[29],"other":[30],"and":[31,79,83,96,180,202,213],"use":[32],"traditional":[33],"decision-theoretic":[34],"risk":[35],"management":[36],"techniques":[37],"determine":[39],"investments.":[41,99],"We":[42,69,100,166],"argue":[43],"in":[44,62,107,139,153,188],"this":[45,48],"paper":[46],"method":[49],"is":[50,129,158],"incomplete":[51],"because":[52],"the":[54,92,103,108,112,117,122,131,140,146,150,154,162,171,189,194,197,214,218,225,230],"problem's":[55],"strategic":[56],"nature\u2014hackers":[57],"alter":[58],"hacking":[60],"strategies":[61],"response":[63],"a":[65,126,134],"firm's":[66,147],"strategies.":[68],"propose":[70],"game":[71,81,105,128,203],"theory":[72,82,85,142,156,191,201,204],"for":[73],"determining":[74],"IT":[75],"levels":[78],"compare":[80],"decision":[84,141,155,190,200],"approaches":[86,205],"on":[87,224],"several":[88],"dimensions":[89],"such":[90],"levels,":[94],"vulnerability,":[95],"payoff":[97,110,136],"from":[98,174],"show":[101,168],"sequential":[104],"results":[106,198],"maximum":[109],"firm,":[113],"but":[114],"requires":[115],"firm":[118,132,172,219,231],"move":[119],"first":[120],"before":[121,221],"hacker.":[123],"Even":[124],"if":[125,170],"simultaneous":[127],"played,":[130],"enjoys":[133],"higher":[135],"than":[137],"approach,":[143,192],"except":[144],"when":[145],"estimate":[148,184,233],"hacker":[151,164,178,186,234],"effort":[152,179,187],"approach":[157],"sufficiently":[159],"close":[160],"actual":[163],"effort.":[165,235],"also":[167],"learns":[173],"prior":[175],"observations":[176],"uses":[181],"these":[182],"future":[185],"then":[193],"gap":[195],"between":[196],"diminishes":[206],"over":[207],"time.":[208],"The":[209],"rate":[210],"convergence":[212,222],"extent":[215],"loss":[217],"suffers":[220],"depend":[223],"learning":[226],"model":[227],"employed":[228],"by":[229]},"counts_by_year":[{"year":2026,"cited_by_count":8},{"year":2025,"cited_by_count":17},{"year":2024,"cited_by_count":14},{"year":2023,"cited_by_count":12},{"year":2022,"cited_by_count":13},{"year":2021,"cited_by_count":25},{"year":2020,"cited_by_count":14},{"year":2019,"cited_by_count":14},{"year":2018,"cited_by_count":16},{"year":2017,"cited_by_count":20},{"year":2016,"cited_by_count":13},{"year":2015,"cited_by_count":13},{"year":2014,"cited_by_count":10},{"year":2013,"cited_by_count":13},{"year":2012,"cited_by_count":9}],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2025-10-10T00:00:00"}