Using Private and Public Assessments in Security Information Sharing Agreements
Abstract
Information sharing among organizations has been gaining attention as a method for improving cybersecurity. However, the associated disclosure costs act as deterrents for firms' voluntary cooperation. In this work, we take a game-theoretic approach to understanding firms' incentives in these agreements. We propose the design of inter-temporal incentives (i.e. conditioning future cooperation on past interactions). Specifically, we show that incentives for full cooperation can be designed if firms share their private assessments of other firms' disclosure decisions through a common communication platform. We further show that similar incentives can be designed based on outcomes of a public rating/assessment system.
Cite
@article{arxiv.1604.04871,
title = {Using Private and Public Assessments in Security Information Sharing Agreements},
author = {Parinaz Naghizadeh and Mingyan Liu},
journal= {arXiv preprint arXiv:1604.04871},
year = {2020}
}
Comments
To appear in the IEEE Transactions on Information Forensics and Security (IEEE TIFS)