{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,26]],"date-time":"2026-02-26T19:34:53Z","timestamp":1772134493791,"version":"3.50.1"},"publisher-location":"Cham","reference-count":35,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783030324292","type":"print"},{"value":"9783030324308","type":"electronic"}],"license":[{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019]]},"DOI":"10.1007\/978-3-030-32430-8_9","type":"book-chapter","created":{"date-parts":[[2019,10,25]],"date-time":"2019-10-25T11:11:01Z","timestamp":1572001861000},"page":"135-151","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["Investing in Prevention or Paying for Recovery - Attitudes to Cyber Risk"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1965-842X","authenticated-orcid":false,"given":"Anna","family":"Cartwright","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0194-9368","authenticated-orcid":false,"given":"Edward","family":"Cartwright","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Lian","family":"Xue","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2019,10,23]]},"reference":[{"key":"9_CR1","unstructured":"Bada, M., Sasse, A.M., Nurse, J.R.: Cyber security awareness campaigns: why do they fail to change behaviour? arXiv preprint \n                    arXiv:1901.02672\n                    \n                  , 9 Januaray 2019"},{"key":"9_CR2","unstructured":"Arora, A., Hall, D., Pinto, C.A., Ramsey, D., Telang, R.: An ounce of prevention vs. a pound of cure: how can we measure the value of IT security solutions? Lawrence Berkeley National Lab (LBNL), Berkeley, CA USA, 12 January 2004"},{"key":"9_CR3","doi-asserted-by":"crossref","unstructured":"Grossklags, J., Christin, N., Chuang, J.: Predicted and observed user behavior in the weakest-link security game. In: UPSEC, April 2008","DOI":"10.1109\/GAMENETS.2009.5137460"},{"key":"9_CR4","doi-asserted-by":"crossref","unstructured":"Grossklags, J., Christin, N., Chuang, J.: Secure or insure? A game-theoretic analysis of information security games. In: Proceedings of the 17th International Conference on World Wide Web, pp. 209\u2013218, 21 April 2008","DOI":"10.1145\/1367497.1367526"},{"key":"9_CR5","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1007\/978-3-319-20550-2_1","volume-title":"Detection of Intrusions and Malware, and Vulnerability Assessment","author":"A Kharraz","year":"2015","unstructured":"Kharraz, A., Robertson, W., Balzarotti, D., Bilge, L., Kirda, E.: Cutting the gordian knot: a look under the hood of ransomware attacks. In: Almgren, M., Gulisano, V., Maggi, F. (eds.) DIMVA 2015. LNCS, vol. 9148, pp. 3\u201324. Springer, Cham (2015). \n                    https:\/\/doi.org\/10.1007\/978-3-319-20550-2_1"},{"issue":"1","key":"9_CR6","doi-asserted-by":"publisher","first-page":"2","DOI":"10.1186\/s40163-019-0097-9","volume":"8","author":"G Hull","year":"2019","unstructured":"Hull, G., John, H., Arief, B.: Ransomware deployment methods and analysis: views from a predictive model and human responses. Crime Sci. 8(1), 2 (2019)","journal-title":"Crime Sci."},{"issue":"1","key":"9_CR7","first-page":"10","volume":"13","author":"R Richardson","year":"2017","unstructured":"Richardson, R., North, M.M.: Ransomware: evolution, mitigation and prevention. Int. Manag. Rev. 13(1), 10 (2017)","journal-title":"Int. Manag. Rev."},{"issue":"2","key":"9_CR8","doi-asserted-by":"publisher","first-page":"26","DOI":"10.3390\/g10020026","volume":"10","author":"A Cartwright","year":"2019","unstructured":"Cartwright, A., Cartwright, E.: Ransomware and reputation. Games 10(2), 26 (2019)","journal-title":"Games"},{"key":"9_CR9","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-68711-7_21","volume-title":"Decision and Game Theory for Security","author":"A Laszka","year":"2017","unstructured":"Laszka, A., Farhang, S., Grossklags, J.: On the economics of ransomware. In: Rass, S., An, B., Kiekintveld, C., Fang, F., Schauer, S. (eds.) GameSec 2017. LNCS, vol. 10575. Springer, Cham (2017). \n                    https:\/\/doi.org\/10.1007\/978-3-319-68711-7_21"},{"key":"9_CR10","doi-asserted-by":"crossref","unstructured":"August, T., Dao, D., Niculescu, M.F.: Economics of ransomware attacks. SSRN (2019)","DOI":"10.2139\/ssrn.3351416"},{"key":"9_CR11","unstructured":"Janofsky, A.: HBO, uber incidents shed light on ransoms without ransomware. Wall Street J. (2017)"},{"key":"9_CR12","unstructured":"Cook, S.: 2017\u20132018 ransomware statistics and facts (2018). \n                    https:\/\/www.comparitech.com\/antivirus\/ransomware-statistics\/"},{"issue":"2","key":"9_CR13","doi-asserted-by":"publisher","first-page":"263","DOI":"10.2307\/1914185","volume":"47","author":"D Kahneman","year":"1979","unstructured":"Kahneman, D., Tversky, A.: Prospect theory: an analysis of decision under risk. Econometrica 47(2), 263\u2013292 (1979)","journal-title":"Econometrica"},{"issue":"4481","key":"9_CR14","doi-asserted-by":"publisher","first-page":"453","DOI":"10.1126\/science.7455683","volume":"211","author":"A Tversky","year":"1981","unstructured":"Tversky, A., Kahneman, D.: The framing of decisions and the psychology of choice. Science 211(4481), 453\u2013458 (1981)","journal-title":"Science"},{"key":"9_CR15","series-title":"NATO ASI Series (Series F: Computer and Systems Sciences)","doi-asserted-by":"publisher","first-page":"81","DOI":"10.1007\/978-3-642-74919-3_4","volume-title":"Multiple Criteria Decision Making and Risk Analysis Using Microcomputers","author":"A Tversky","year":"1989","unstructured":"Tversky, A., Kahneman, D.: Rational choice and the framing of decisions. In: Karpak, B., Zionts, S. (eds.) Multiple Criteria Decision Making and Risk Analysis Using Microcomputers. NATO ASI Series, vol. 56, pp. 81\u2013126. Springer, Berlin (1989). \n                    https:\/\/doi.org\/10.1007\/978-3-642-74919-3_4"},{"issue":"4","key":"9_CR16","first-page":"177","volume":"10","author":"TA Homonoff","year":"2018","unstructured":"Homonoff, T.A.: Can small incentives have large effects? The impact of taxes versus bonuses on disposable bag use. Am. Econ. J.: Econ. Policy 10(4), 177\u2013210 (2018)","journal-title":"Am. Econ. J.: Econ. Policy"},{"issue":"1","key":"9_CR17","first-page":"1","volume":"1","author":"E Field","year":"2009","unstructured":"Field, E.: Educational debt burden and career choice: Evidence from a financial aid experiment at NYU Law School. Am. Econ. J.: Appl. Econ. 1(1), 1\u201321 (2009)","journal-title":"Am. Econ. J.: Appl. Econ."},{"key":"9_CR18","doi-asserted-by":"crossref","unstructured":"Fryer Jr, R.G., Levitt, S.D., List, J., Sadoff, S.: Enhancing the efficacy of teacher incentives through loss aversion: a field experiment. National Bureau of Economic Research (2012)","DOI":"10.3386\/w18237"},{"key":"9_CR19","doi-asserted-by":"crossref","unstructured":"Hernandez-Castro, J., Cartwright, E., Stepanova, A.: Economic analysis of ransomware. arXiv 2017. arXiv preprint \n                    arXiv:1703.06660","DOI":"10.2139\/ssrn.2937641"},{"issue":"4","key":"9_CR20","doi-asserted-by":"publisher","first-page":"597","DOI":"10.1016\/j.cose.2011.12.010","volume":"31","author":"SL Pfleeger","year":"2012","unstructured":"Pfleeger, S.L., Caputo, D.D.: Leveraging behavioral science to mitigate cyber security risk. Comput. Secur. 31(4), 597\u2013611 (2012)","journal-title":"Comput. Secur."},{"key":"9_CR21","unstructured":"Baddeley, M.: Information security: lessons from behavioural economics. In: Workshop on the Economics of Information Security (2011)"},{"issue":"4","key":"9_CR22","doi-asserted-by":"publisher","first-page":"517","DOI":"10.1007\/s10669-013-9473-2","volume":"33","author":"H Rosoff","year":"2013","unstructured":"Rosoff, H., Cui, J., John, R.S.: Heuristics and biases in cyber security dilemmas. Environ. Syst. Decis. 33(4), 517\u2013529 (2013)","journal-title":"Environ. Syst. Decis."},{"key":"9_CR23","unstructured":"Harrington, S., Anderson, C., Agarwal, R.: Practicing safe computing: message framing, self-view, and home computer user security behavior intentions. In: Proceedings of ICIS 2006, p. 93, 31 December 2006"},{"key":"9_CR24","unstructured":"Ravindran, S.K., Nah, F.F., Cheng, M.X.: Effect of probable and guaranteed monetary value gains and losses on cybersecurity behavior of users. In: MWAIS 2018 Proceedings, pp. 1\u20135 (2018)"},{"key":"9_CR25","unstructured":"Smith, S.N., Nah, F.F., Cheng, M., Ravindran, S.K.: The impact of monetary value gains and losses on cybersecurity behavior. In: Proceedings of the Midwest Association for Information Systems Conference, Springfield, Illinois (2017)"},{"issue":"2","key":"9_CR26","doi-asserted-by":"publisher","first-page":"332","DOI":"10.1257\/jel.38.2.332","volume":"38","author":"C Starmer","year":"2000","unstructured":"Starmer, C.: Developments in non-expected utility theory: the hunt for a descriptive theory of choice under risk. J. Econ. Lit. 38(2), 332\u2013382 (2000)","journal-title":"J. Econ. Lit."},{"issue":"2","key":"9_CR27","doi-asserted-by":"publisher","first-page":"91","DOI":"10.1257\/jep.32.2.91","volume":"32","author":"T O\u2019Donoghue","year":"2018","unstructured":"O\u2019Donoghue, T., Somerville, J.: Modeling risk aversion in economics. J. Econ. Perspect. 32(2), 91\u2013114 (2018)","journal-title":"J. Econ. Perspect."},{"issue":"4","key":"9_CR28","doi-asserted-by":"publisher","first-page":"263","DOI":"10.1002\/bdm.414","volume":"15","author":"EU Weber","year":"2002","unstructured":"Weber, E.U., Blais, A.R., Betz, N.E.: A domain specific risk attitude scale: measuring risk perceptions and risk behaviors. J. Behav. Decis. Making 15(4), 263\u2013290 (2002)","journal-title":"J. Behav. Decis. Making"},{"issue":"2","key":"9_CR29","doi-asserted-by":"publisher","first-page":"171","DOI":"10.1007\/s10683-006-9159-4","volume":"10","author":"U Fischbacher","year":"2007","unstructured":"Fischbacher, U.: z-Tree: Zurich toolbox for ready-made economic experiments. Exp. Econ. 10(2), 171\u2013178 (2007)","journal-title":"Exp. Econ."},{"key":"9_CR30","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"117","DOI":"10.1007\/978-3-642-25280-8_11","volume-title":"Decision and Game Theory for Security","author":"B Johnson","year":"2011","unstructured":"Johnson, B., B\u00f6hme, R., Grossklags, J.: Security games with market insurance. In: Baras, J.S., Katz, J., Altman, E. (eds.) GameSec 2011. LNCS, vol. 7037, pp. 117\u2013130. Springer, Heidelberg (2011). \n                    https:\/\/doi.org\/10.1007\/978-3-642-25280-8_11"},{"key":"9_CR31","doi-asserted-by":"publisher","first-page":"549","DOI":"10.2307\/25750691","volume":"1","author":"AC Johnston","year":"2010","unstructured":"Johnston, A.C., Warkentin, M.: Fear appeals and information security behaviors: an empirical study. MIS Q. 1, 549\u2013566 (2010)","journal-title":"MIS Q."},{"key":"9_CR32","unstructured":"Kharlamov, A., Jaiswal, A., Parry, G., Pogrebna, G.: A cyber domain-specific risk attitudes scale to address security issues in the digital space (2018)"},{"key":"9_CR33","doi-asserted-by":"crossref","unstructured":"Grossklags, J., Christin, N., Chuang, J.: Security and insurance management in networks with heterogeneous agents. In: Proceedings of the 9th ACM Conference on Electronic Commerce, vol. 8, pp. 160\u2013169, 8 July 2008","DOI":"10.1145\/1386790.1386818"},{"issue":"2","key":"9_CR34","doi-asserted-by":"publisher","first-page":"459","DOI":"10.1016\/j.geb.2011.02.003","volume":"73","author":"M Dufwenberg","year":"2011","unstructured":"Dufwenberg, M., G\u00e4chter, S., Hennig-Schmidt, H.: The framing of games and the psychology of play. Games Econ. Beh. 73(2), 459\u2013478 (2011)","journal-title":"Games Econ. Beh."},{"issue":"164","key":"9_CR35","doi-asserted-by":"publisher","first-page":"75","DOI":"10.1016\/j.econlet.2018.01.006","volume":"1","author":"O Poulsen","year":"2018","unstructured":"Poulsen, O., Saral, K.J.: Coordination and focality under gain-loss framing: experimental evidence. Econ. Lett. 1(164), 75\u201378 (2018)","journal-title":"Econ. Lett."}],"container-title":["Lecture Notes in Computer Science","Decision and Game Theory for Security"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-32430-8_9","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,2,9]],"date-time":"2020-02-09T00:19:36Z","timestamp":1581207576000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-030-32430-8_9"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019]]},"ISBN":["9783030324292","9783030324308"],"references-count":35,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-32430-8_9","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019]]},"assertion":[{"value":"23 October 2019","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"GameSec","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Decision and Game Theory for Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Stockholm","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Sweden","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2019","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30 October 2019","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"1 November 2019","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"10","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"gamesec2019","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/www.gamesec-conf.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"easychair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"47","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"21","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"11","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"45% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3.5","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}