{"id":1325,"date":"2016-12-13T17:37:26","date_gmt":"2016-12-14T00:37:26","guid":{"rendered":"https:\/\/blogs.ubc.ca\/genemoolee\/?p=1325"},"modified":"2023-05-10T22:41:50","modified_gmt":"2023-05-11T05:41:50","slug":"security-information-disclosure-j-cybersecurity-2016","status":"publish","type":"post","link":"https:\/\/blogs.ubc.ca\/genemoolee\/2016\/12\/13\/security-information-disclosure-j-cybersecurity-2016\/","title":{"rendered":"How would information disclosure influence organizations\u2019 outbound spam volume? Evidence from a field experiment (J. Cybersecurity 2016)"},"content":{"rendered":"<h4>He, Shu*, <span style=\"text-decoration: underline;\"><strong>Gene Moo Lee<\/strong><\/span><strong>*<\/strong>, Sukjin Han, Andrew B. Whinston (2016) <a href=\"https:\/\/academic.oup.com\/cybersecurity\/article\/2\/1\/99\/2733163\" target=\"_blank\" rel=\"noopener noreferrer\">How Would Information Disclosure Influence Organizations\u2019 Outbound Spam Volume? Evidence from a Field Experiment<\/a>.\u00a0<strong><em>Journal of Cybersecurity\u00a0<\/em><\/strong>2(1), pp. 99-118. (* equal contribution)<\/h4>\n<ul>\n<li>Experiment Website: <a href=\"http:\/\/cloud.spamrankings.net\/\" target=\"_blank\" rel=\"noopener noreferrer\">http:\/\/cloud.spamrankings.net\/<\/a><\/li>\n<li>Funded by NSF (<a href=\"https:\/\/www.nsf.gov\/awardsearch\/showAward?AWD_ID=1228990\" target=\"_blank\" rel=\"noopener noreferrer\">Award #1228990<\/a>)<\/li>\n<li>Presented in <a href=\"https:\/\/www.econinfosec.org\/archive\/weis2015\/\" target=\"_blank\" rel=\"noopener noreferrer\">WEIS (Delft, Netherlands 2015)<\/a> and CIST (San Francisco, CA 2014)<\/li>\n<li>Media coverage:\u00a0[<a href=\"https:\/\/cacm.acm.org\/careers\/177046-is-your-data-safe-why-you-should-care-more-about-spam\/fulltext\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">CACM<\/a>] [<a href=\"https:\/\/www.sciencedaily.com\/releases\/2014\/07\/140723180751.htm\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Science Daily<\/a>] [<a href=\"https:\/\/medium.com\/mccombs-school-of-business-at-the-university-of\/spam-shaming-to-improve-cybersecurity-55822da4abd8\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">McCombs Medium<\/a>] [<a href=\"http:\/\/www.texasenterprise.utexas.edu\/2017\/04\/26\/research-brief\/spam-shaming-to-improve-cybersecurity\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Texas Enterprise<\/a>]<\/li>\n<li>Research assistants: Yun-Sik Choi, Ying-Yu Chen, Mark Varga, Zeyuan Zhu, Niyati Parameswaran, Markus Iivonen<\/li>\n<\/ul>\n<p>Cyber-insecurity is a serious threat in the digital world. In the present paper, we argue that a suboptimal cybersecurity environment is partly due to organizations\u2019 underinvestment on security and a lack of suitable policies. The motivation for this paper stems from a related policy question: how to design policies for governments and other organizations that can ensure a sufficient level of cybersecurity. We address the question by exploring a policy devised to alleviate information asymmetry and to achieve transparency in cybersecurity information sharing practice. We propose a cybersecurity evaluation agency along with regulations on information disclosure. To empirically evaluate the effectiveness of such an institution, we conduct a large-scale randomized field experiment on 7919\u2009US organizations. Specifically, we generate organizations\u2019 security reports based on their outbound spam relative to the industry peers, then share the reports with the subjects in either private or public ways. Using models for heterogeneous treatment effects and machine learning techniques, we find evidence from this experiment that the security information sharing combined with publicity treatment has significant effects on spam reduction for original large spammers. Moreover, significant peer effects are observed among industry peers after the experiment.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>He, Shu*, Gene Moo Lee*, Sukjin Han, Andrew B. Whinston (2016) How Would Information Disclosure Influence Organizations\u2019 Outbound Spam Volume? Evidence from a Field Experiment.\u00a0Journal of Cybersecurity\u00a02(1), pp. 99-118. (* equal contribution) Experiment Website: http:\/\/cloud.spamrankings.net\/ Funded by NSF (Award #1228990) Presented in WEIS (Delft, Netherlands 2015) and CIST (San Francisco, CA 2014) Media coverage:\u00a0[CACM] [Science [&hellip;]<\/p>\n","protected":false},"author":51140,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2267],"tags":[379631,45275,2467065,4381942,45134,45130,45131,45128,45278,45133,45160,45132,6306],"class_list":["post-1325","post","type-post","status-publish","format-standard","hentry","category-publications","tag-big-data","tag-cbl","tag-cybersecurity","tag-firm-level","tag-heterogeneous-treatment-effects","tag-information-asymmetry","tag-peer-effects","tag-policy-dessign","tag-psbl","tag-random-forest","tag-randomized-field-experiment","tag-regression-tree","tag-risk"],"_links":{"self":[{"href":"https:\/\/blogs.ubc.ca\/genemoolee\/wp-json\/wp\/v2\/posts\/1325","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.ubc.ca\/genemoolee\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.ubc.ca\/genemoolee\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.ubc.ca\/genemoolee\/wp-json\/wp\/v2\/users\/51140"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.ubc.ca\/genemoolee\/wp-json\/wp\/v2\/comments?post=1325"}],"version-history":[{"count":11,"href":"https:\/\/blogs.ubc.ca\/genemoolee\/wp-json\/wp\/v2\/posts\/1325\/revisions"}],"predecessor-version":[{"id":3253,"href":"https:\/\/blogs.ubc.ca\/genemoolee\/wp-json\/wp\/v2\/posts\/1325\/revisions\/3253"}],"wp:attachment":[{"href":"https:\/\/blogs.ubc.ca\/genemoolee\/wp-json\/wp\/v2\/media?parent=1325"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.ubc.ca\/genemoolee\/wp-json\/wp\/v2\/categories?post=1325"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.ubc.ca\/genemoolee\/wp-json\/wp\/v2\/tags?post=1325"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}