Network Security and Contagion
AbstractWe develop a theoretical model of security investments in a network of interconnected agents. Network connections introduce the possibility of cascading failures due to an exogenous or endogenous attack depending on the profile of security investments by the agents. The general presumption in the literature, based on intuitive arguments or analysis of symmetric networks, is that because security investments create positive externalities on other agents, there will be underinvestment in security. We show that this reasoning is incomplete because of a first-order economic force: security investments are also strategic substitutes. In a general (non-symmetric) network, this implies that underinvestment by some agents will encourage overinvestment by others. We demonstrate by means of examples that there can be overinvestment by some agents and also that aggregate probabilities of infection can be lower in equilibrium compared to the social optimum. We then provide sufficient conditions for underinvestment. This requires both sufficiently convex cost functions (convexity alone is not enough) and networks that are either symmetric or locally tree-like. We also characterize the impact of network structure on equilibrium and optimal investments. Finally, we show that when the attack location is endogenized (by assuming that the attacker chooses a probability distribution over the location of the attack in order to maximize damage), there is an additional incentive for overinvestment: greater investment by an agent shifts the attack to other parts of the network.
Download InfoIf you experience problems downloading a file, check if you have the proper application to view it first. In case of further problems read the IDEAS help page. Note that these files are not on the IDEAS site. Please be patient as the files may be large.
As the access to this document is restricted, you may want to look for a different version under "Related research" (further below) or search for a different version of it.
Bibliographic InfoPaper provided by National Bureau of Economic Research, Inc in its series NBER Working Papers with number 19174.
Date of creation: Jun 2013
Date of revision:
Contact details of provider:
Postal: National Bureau of Economic Research, 1050 Massachusetts Avenue Cambridge, MA 02138, U.S.A.
Web page: http://www.nber.org
More information through EDIRC
Other versions of this item:
- D6 - Microeconomics - - Welfare Economics
- D62 - Microeconomics - - Welfare Economics - - - Externalities
This paper has been announced in the following NEP Reports:
- NEP-ALL-2013-07-05 (All new papers)
- NEP-MIC-2013-07-05 (Microeconomics)
- NEP-NET-2013-07-05 (Network Economics)
Please report citation or reference errors to , or , if you are the registered author of the cited work, log in to your RePEc Author Service profile, click on "citations" and make appropriate adjustments.:
- Daron Acemoglu & Asuman Ozdaglar & Alireza Tahbaz-Salehi, 2013. "Systemic Risk and Stability in Financial Networks," NBER Working Papers 18727, National Bureau of Economic Research, Inc.
- Brito, Dagobert L. & Sheshinski, Eytan & Intriligator, Michael D., 1991. "Externalities and compulsary vaccinations," Journal of Public Economics, Elsevier, vol. 45(1), pages 69-90, June.
- Matthew O. Jackson & Asher Wolinsky, 1995.
"A Strategic Model of Social and Economic Networks,"
1098R, Northwestern University, Center for Mathematical Studies in Economics and Management Science.
- Vega-Redondo,Fernando, 2007. "Complex Social Networks," Cambridge Books, Cambridge University Press, number 9780521674096, April.
- Heski Bar-Isaac & Mariagiovanna Baccara, 2006. "How to Organize Crime," Working Papers 06-07, New York University, Leonard N. Stern School of Business, Department of Economics.
- Steven M. Goldman and James Lightwood., 1996.
"Cost Optimization in the SIS Model of Infectious Disease with Treatment,"
Economics Working Papers
96-245, University of California at Berkeley.
- Goldman Steven Marc & Lightwood James, 2002. "Cost Optimization in the SIS Model of Infectious Disease with Treatment," The B.E. Journal of Economic Analysis & Policy, De Gruyter, vol. 2(1), pages 1-24, April.
- Goldman, Steven M. & Lightwood, James, 1996. "Cost Optimization in the SIS Model of Infectious Disease with Treatment," Department of Economics, Working Paper Series qt0r88q87t, Department of Economics, Institute for Business and Economic Research, UC Berkeley.
- Larson, Nathan, 2011. "Network security," MPRA Paper 32822, University Library of Munich, Germany.
- Dan Kovenock & Brian Roberson, 2010. "The Optimal Defense of Networks of Targets," Purdue University Economics Working Papers 1251, Purdue University, Department of Economics.
- Venkatesh Bala & Sanjeev Goyal, 2000. "A Noncooperative Model of Network Formation," Econometrica, Econometric Society, vol. 68(5), pages 1181-1230, September.
- Vega-Redondo,Fernando, 2007. "Complex Social Networks," Cambridge Books, Cambridge University Press, number 9780521857406, April.
- Benjamin Golub & Matthew O. Jackson, 2012. "How Homophily Affects the Speed of Learning and Best-Response Dynamics," The Quarterly Journal of Economics, Oxford University Press, vol. 127(3), pages 1287-1338.
- Geoffard, Pierre-Yves & Philipson, Tomas, 1997. "Disease Eradication: Private versus Public Vaccination," American Economic Review, American Economic Association, vol. 87(1), pages 222-30, March.
- de Meza, David & Gould, J R, 1992. "The Social Efficiency of Private Decisions to Enforce Property Rights," Journal of Political Economy, University of Chicago Press, vol. 100(3), pages 561-80, June.
- Olivier Jeanne, 2014.
"Macroprudential Policies in a Global Perspective,"
NBER Working Papers
19967, National Bureau of Economic Research, Inc.
For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: ().
If references are entirely missing, you can add them using this form.