Are security experts useful? Bayesian Nash equilibria for network security games with limited information

  • Authors:
  • Benjamin Johnson;Jens Grossklags;Nicolas Christin;John Chuang

  • Affiliations:
  • CyLab, Carnegie Mellon University;Center for Information Technology Policy, Princeton University;CyLab, Carnegie Mellon University;School of Information, University of California, Berkeley

  • Venue:
  • ESORICS'10 Proceedings of the 15th European conference on Research in computer security
  • Year:
  • 2010

Quantified Score

Hi-index 0.00

Visualization

Abstract

A common assumption in security research is that more individual expertise unambiguously leads to a more secure overall network. We present a game-theoretic model in which this common assumption does not hold. Our findings indicate that expert users can be not only invaluable contributors, but also free-riders, defectors, and narcissistic opportunists. A direct application is that user education needs to highlight the cooperative nature of security, and foster the community sense, in particular, of higher skilled computer users. As a technical contribution, this paper represents, to our knowledge, the first formal study to quantitatively assess the impact of different degrees of information security expertise on the overall security of a network.