An Economic Approach to Security

提案编号：0428422标题：一种经济的方法来安全PI：琼Feigenbaum摘要互联网安全被普遍认为是一个极其重要的问题。 此外，在过去三十年中开发的技术解决方案代表了深刻而优雅的知识贡献。 然而，这些解决方案很少被广泛使用。 显然有些不对劲。 最近，安德森和其他人认为，缺失的环节是经济学：只有通过理解各种安全建议中固有的激励因素，才能决定哪一种（如果有的话）实际上会带来更大的安全。 该研究项目是一个为期三年的，多机构，多学科的网络环境中的安全经济学的调查。 具体的研究课题包括域间路由的安全性，可信平台的可采用性和私人信息的市场。 该项目的智力价值和更广泛的影响是相互交织的，两者都基于不仅解决技术问题的潜力，而且还开发了一般分析技术，用于评估真实的安全问题的候选解决方案，从而为采用提供了应有的激励。 如果成功，它将带来更大的实际安全性，而不仅仅是提供更多的安全技术。 整合安全、网络和经济的教育活动也是一个主要目标，研究人员在研究生和本科生层面都有经验。

Proposal Number: 0428422Title: An Economic Approach to SecurityPI: Joan FeigenbaumAbstract Internet security is universally seen as an extremely important problem. Moreover, technical solutions developed over the last three decades represent deep and elegant intellectual contributions. Yet few of these solutions are in widespread use. Clearly something is amiss. It has recently been argued, by Anderson and others, that the missing linkis economics: Only through understanding the incentives inherent in various security proposals can one decide which, if any, would actually lead to greater security. This research project is a three-year, multi-institutional, multi-disciplinary investigation of the economics of security in networked environments. Specific research topics include security of interdomain routing, adoptability of trusted platforms, and markets for private information. The intellectual merit and broader impact of the project are intertwined, both based on the potential not only to solve technical problems but also to develop general analytical techniques for evaluating candidate solutions to real security problems in a manner that gives adoption incentives their just due. If successful, it will lead to greater actual security, rather than simply to more available security technology. Educational activity that integrates security, networking, and economics is also a major goal one on which the investigators have experience on both graduate and undergraduate levels.