Deep Blue
Deep Blue

Deep Blue at the University of Michigan > Research Collections > Information, School of (SI) >

Please use this persistent URL to cite or link to this item:
http://hdl.handle.net/2027.42/63006 ◀ bookmark this

Title: A Social Mechanism for Supporting Home Computer Security
Authors: Wash, Rick
MacKie-Mason, Jeffrey K.
Keywords: information security
incentive centered design
mechanism design
botnet
computer security
social computing
Issue Date: 13-Dec-2008
Publisher: WISE
Citation: Workshop on Information System Economics (WISE) ’08, Paris, France <http://hdl.handle.net/2027.42/63006>
Abstract: Hackers have learned to leverage the enormous number of poorly protected home computers by turning them into a large distributed system (known as a botnet), making home computers an important frontier for security research. They present special problems: owners are unsophisticated, and usage profiles are varied making one-size-fits-all firewall policies ineffective. We propose a social firewall that collects security decisions and both user and usage characteristics, and provides users with personalized information to assist with allow/deny recommendations. To succeed, a social firewall must deal with at least three user behavior issues: why contribute private information? why make effort to provide quality information? and, how to prevent manipulation by adversaries? We sketch an incentive-centered design approach to each problem. We provide an economic model and some analytic results for a solution to the fundamental problem: why contribute? We show that an excludable public goods mechanism can achieve a better outcome than a system without social motivators.
Appears in Collections:Information, School of (SI)
Interdisciplinary and Peer-Reviewed
Public Policy, Gerald R. Ford School of

Files in This Item:

File Description SizeFormat 
social-firewall-wise08-final.pdfMain article190KbAdobe PDFView/Open

Deep Blue encourages the fair use of copyrighted material, and you are free to link to content here without asking for permission. Consult the document(s) and/or contact the copyright holder for additional rights questions and requests.