{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,2]],"date-time":"2026-05-02T16:20:12Z","timestamp":1777738812328,"version":"3.51.4"},"reference-count":43,"publisher":"Informa UK Limited","issue":"2","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Journal of Management Information Systems"],"published-print":{"date-parts":[[2012,10]]},"DOI":"10.2753\/mis0742-1222290204","type":"journal-article","created":{"date-parts":[[2012,12,1]],"date-time":"2012-12-01T02:02:47Z","timestamp":1354327367000},"page":"77-108","source":"Crossref","is-referenced-by-count":48,"title":["Hacker Behavior, Network Effects, and the Security Software Market"],"prefix":"10.1080","volume":"29","author":[{"given":"Debabrata","family":"Dey","sequence":"first","affiliation":[{"name":"a Foster School of Business, University of Washington"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Atanu","family":"Lahiri","sequence":"additional","affiliation":[{"name":"a Foster School of Business, University of Washington"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Guoying","family":"Zhang","sequence":"additional","affiliation":[{"name":"b Dillard College of Business Administration, Midwestern State University"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"301","published-online":{"date-parts":[[2014,12,8]]},"reference":[{"issue":"5799","key":"1","doi-asserted-by":"crossref","first-page":"610","DOI":"10.1126\/science.1130992","article-title":"The economics of information security","volume":"314","author":"R. Anderson","year":"2006","journal-title":"Science"},{"issue":"11","key":"2","doi-asserted-by":"crossref","first-page":"1703","DOI":"10.1287\/mnsc.1060.0568","article-title":"Network software security and user incentives","volume":"52","author":"T. August","year":"2006","journal-title":"Management Science"},{"issue":"1","key":"3","doi-asserted-by":"crossref","first-page":"48","DOI":"10.1287\/isre.1070.0142","article-title":"Let the pirates patch? An economic analysis of software security patch restrictions","volume":"19","author":"T. August","year":"2008","journal-title":"Information Systems Research"},{"key":"4","article-title":"Win32\/Blaster: A case study from Microsoft's perspective","author":"M. Braverman","year":"2005"},{"issue":"12","key":"5","doi-asserted-by":"crossref","first-page":"1627","DOI":"10.1287\/mnsc.42.12.1627","article-title":"Network externalities in microcomputer software: An econometric analysis of the spreadsheet market","volume":"42","author":"E. Brynjolfsson","year":"1996","journal-title":"Management Science"},{"key":"6","doi-asserted-by":"crossref","first-page":"17","DOI":"10.1007\/1-4020-8090-5_2","volume-title":"Economics of Information Security, Advances in Information Security","volume":"12","author":"L. Camp","year":"2004"},{"issue":"2","key":"7","doi-asserted-by":"crossref","first-page":"281","DOI":"10.2753\/MIS0742-1222250211","article-title":"Decision-theoretic and game-theoretic approaches to IT security investment","volume":"25","author":"H. Cavusoglu","year":"2008","journal-title":"Journal of Management Information Systems"},{"issue":"3","key":"8","doi-asserted-by":"crossref","first-page":"241","DOI":"10.2753\/MIS0742-1222260308","article-title":"Risks and benefits of signaling information system characteristics to strategic attackers","volume":"26","author":"M. Cremonini","year":"2009-10","journal-title":"Journal of Management Information Systems"},{"key":"9","unstructured":"Eckelberry, A. Microsoft practices predatory pricing. Sunbeltblog, June 2006 (available at <a target=\"_blank\" href='http:\/\/www.gfi.com\/blog\/microsoft-practices-predatory-pricing\/'>www.gfi.com\/blog\/microsoft-practices-predatory-pricing\/<\/a>"},{"key":"10","unstructured":"Eichorn, K., and Smith, J. McAfee releases online banking safety guide for the 47 percent of consumers who are underprotected. Press Release, McAfee, Santa Clara, CA, August 2011 (available at <a target=\"_blank\" href='http:\/\/www.mcafee.com\/us\/about\/news\/2011\/q3\/20110803-01.aspx'>www.mcafee.com\/us\/about\/news\/2011\/q3\/20110803-01.aspx<\/a>"},{"key":"11","unstructured":"Email attacks: This time it's personal. Cisco Security White Paper, San Jose, CA, June 2011 (available at <a target=\"_blank\" href='http:\/\/www.cisco.com\/en\/US\/prod\/collateral\/vpndevc\/ps10128\/ps10339\/ps10354\/targeted_attacks.pdf'>www.cisco.com\/en\/US\/prod\/collateral\/vpndevc\/ps10128\/ps10339\/ps10354\/targeted_attacks.pdf<\/a>"},{"issue":"5","key":"12","first-page":"940","article-title":"Installed base and compatibility: Innovation, product preannouncements, and predation","volume":"76","author":"J. Farrell","year":"1986","journal-title":"American Economic Review"},{"issue":"2","key":"13","doi-asserted-by":"crossref","first-page":"327","DOI":"10.1016\/0022-0531(80)90046-0","article-title":"Entry (and exit) in a differentiated industry","volume":"22","author":"J. Gabszewicz","year":"1980","journal-title":"Journal of Economic Theory"},{"issue":"3","key":"14","doi-asserted-by":"crossref","first-page":"595","DOI":"10.2307\/25750693","article-title":"The impact of malicious agents on the enterprise software industry","volume":"34","author":"M. Galbreth","year":"2010","journal-title":"MIS Quarterly"},{"key":"15","unstructured":"Gartner says security software revenue totaled $7.4 billion in 2005. Press Release, Gartner, Stamford, CT, September 2006 (available at <a target=\"_blank\" href='http:\/\/www.gartner.com\/it\/page.jsp?id=496491\/'>www.gartner.com\/it\/page.jsp?id=496491\/<\/a>"},{"key":"16","unstructured":"Gartner says security software market grew 12 percent in 2010. Press Release, Gartner, Stamford, CT, June 2011 (available at <a target=\"_blank\" href='http:\/\/www.gartner.com\/it\/page.jsp?id=1714714\/'>www.gartner.com\/it\/page.jsp?id=1714714\/<\/a>"},{"issue":"5","key":"17","doi-asserted-by":"crossref","first-page":"787","DOI":"10.1016\/j.respol.2004.01.001","article-title":"The birth of a new industry: Entry by start-ups and the drivers of vendor growth: The case of encryption software","volume":"33","author":"M. Giarratana","year":"2004","journal-title":"Research Policy"},{"issue":"6","key":"18","doi-asserted-by":"crossref","first-page":"909","DOI":"10.1177\/0170840607075267","article-title":"Product strategies and survival in Schumpeterian environments: Evidence from the U. S. security software industry","volume":"28","author":"M. Giarratana","year":"2007","journal-title":"Organization Studies"},{"key":"19","unstructured":"Goodchild, J. Botnets: Size isn't everything, says new report. <i>Computerworld<\/i>, August 3, 2011 (available at <a target=\"_blank\" href='http:\/\/news.idg.no\/cw\/art.cfm?id=E795F760-1A64-6A71-CEE2E437E7955007\/'>http:\/\/news.idg.no\/cw\/art.cfm?id=E795F760-1A64-6A71-CEE2E437E7955007\/<\/a>"},{"issue":"4","key":"20","doi-asserted-by":"crossref","first-page":"438","DOI":"10.1145\/581271.581274","article-title":"The economics of information security investment","volume":"5","author":"L. Gordon","year":"2002","journal-title":"ACM Transactions on Information and System Security"},{"issue":"1","key":"21","doi-asserted-by":"crossref","first-page":"121","DOI":"10.1145\/1107458.1107465","article-title":"Budgeting process for information security expenditures","volume":"49","author":"L. Gordon","year":"2006","journal-title":"Communications of the ACM"},{"issue":"3","key":"22","doi-asserted-by":"crossref","first-page":"337","DOI":"10.2753\/MIS0742-1222250310","article-title":"Investments in information security: A real options perspective with Bayesian postaudit","volume":"25","author":"H. Herath","year":"2008-9","journal-title":"Journal of Management Information Systems"},{"issue":"4","key":"23","doi-asserted-by":"crossref","first-page":"599","DOI":"10.1137\/S0036144500371907","article-title":"The mathematics of infectious diseases","volume":"42","author":"H. Hethcote","year":"2000","journal-title":"SIAM Review"},{"issue":"153","key":"24","doi-asserted-by":"crossref","first-page":"41","DOI":"10.2307\/2224214","article-title":"Stability in competition","volume":"39","author":"H. Hotelling","year":"1929","journal-title":"Economic Journal"},{"issue":"3","key":"25","first-page":"424","article-title":"Network externalities, competition and compatibility","volume":"75","author":"M. Katz","year":"1985","journal-title":"American Economic Review"},{"issue":"4","key":"26","doi-asserted-by":"crossref","first-page":"822","DOI":"10.1086\/261409","article-title":"Technology adoption in the presence of network externalities","volume":"94","author":"M. Katz","year":"1986","journal-title":"Journal of Political Economy"},{"key":"27","unstructured":"Keizer, G. Rival calls Microsoft's security pricing \"predatory,\" \"ruthless.\" <i>Informwationweek<\/i>, June 2006 (available at <a target=\"_blank\" href='http:\/\/www.informationweek.com\/rival-calls-microsofts-security-pricing\/189600302\/'>www.informationweek.com\/rival-calls-microsofts-security-pricing\/189600302\/<\/a>"},{"issue":"2","key":"28","doi-asserted-by":"crossref","first-page":"326","DOI":"10.2307\/3003636","article-title":"Quantity precommitment and Bertrand competition yield Cournot outcomes","volume":"14","author":"D. Kreps","year":"1983","journal-title":"Bell Journal of Economics"},{"issue":"2","key":"29","doi-asserted-by":"crossref","first-page":"241","DOI":"10.2753\/MIS0742-1222250210","article-title":"Understanding the value of countermeasure portfolios in information systems security","volume":"25","author":"R. Kumar","year":"2008","journal-title":"Journal of Management Information Systems"},{"key":"30","unstructured":"Lacy, S. Microsoft sweeps into security. <i>Bloomberg Businessweek<\/i> (May 31, 2006) (available at <a target=\"_blank\" href='http:\/\/www.businessweek.com\/stories\/2006-05-31\/microsoft-sweeps-into-security\/'>www.businessweek.com\/stories\/2006-05-31\/microsoft-sweeps-into-security\/<\/a>"},{"issue":"2","key":"31","doi-asserted-by":"crossref","first-page":"357","DOI":"10.1016\/j.dss.2012.01.007","article-title":"Revisiting the incentive to tolerate illegal distribution of software products","volume":"53","author":"A. Lahiri","year":"2012","journal-title":"Decision Support Systems"},{"issue":"1","key":"32","doi-asserted-by":"crossref","first-page":"78","DOI":"10.1080\/19488300.2012.666780","article-title":"Vaccine market coordination using subsidy","volume":"2","author":"H. Mamani","year":"2012","journal-title":"IIE Transactions on Healthcare Systems Engineering"},{"key":"33","unstructured":"Mullins, R. Cisco study shows mass phishing attacks down, targeted attacks up. <i>Network Computing<\/i> (July 1, 2011) (available at <a target=\"_blank\" href='http:\/\/www.networkcomputing.com\/wan-security\/cisco-study-shows-mass-phishing-attacks\/231000854\/'>www.networkcomputing.com\/wan-security\/cisco-study-shows-mass-phishing-attacks\/231000854\/<\/a>"},{"issue":"2","key":"34","doi-asserted-by":"crossref","first-page":"97","DOI":"10.2753\/MIS0742-1222260205","article-title":"Information security: Facilitating user precautions vis-\u00e0-vis enforcement against attackers","volume":"26","author":"I. Png","year":"2009","journal-title":"Journal of Management Information Systems"},{"issue":"1","key":"35","doi-asserted-by":"crossref","first-page":"121","DOI":"10.1287\/isre.1080.0174","article-title":"Choice and chance: A conceptual model of paths to information security compromise","volume":"20","author":"S. Ransbotham","year":"2009","journal-title":"Information Systems Research"},{"issue":"1","key":"36","doi-asserted-by":"crossref","first-page":"141","DOI":"10.2307\/3003323","article-title":"Monopolistic competition with outside goods","volume":"10","author":"S. Salop","year":"1979","journal-title":"Bell Journal of Economics"},{"key":"37","unstructured":"Sancho, D. The future of BOT worms. White Paper, Trend Micro, Cupertino, CA, 2005 (available at <a target=\"_blank\" href='http:\/\/www.trendmicro.com\/cloud-content\/us\/pdfs\/security-intelligence\/white-papers\/wp_future_of_bots_final.pdf'>www.trendmicro.com\/cloud-content\/us\/pdfs\/security-intelligence\/white-papers\/wp_future_of_bots_final.pdf<\/a>"},{"key":"38","unstructured":"Security industry market share analysis. Market Share Report, OPSWAT, San Francisco, March 2012 (available at <a target=\"_blank\" href='http:\/\/www.opswat.com\/sites\/default\/files\/OPSWAT-market-share-report-march-2012.pdf'>www.opswat.com\/sites\/default\/files\/OPSWAT-market-share-report-march-2012.pdf<\/a>"},{"key":"39","volume-title":"Information Rules: A Strategic Guide to the Network Economy","author":"C. Shapiro","year":"1999"},{"issue":"4","key":"40","doi-asserted-by":"crossref","first-page":"109","DOI":"10.2753\/MIS0742-1222220405","article-title":"An information systems security risk assessment model under the Dempster-Shafer theory of belief functions","volume":"22","author":"L. Sun","year":"2006","journal-title":"Journal of Management Information Systems"},{"key":"41","volume-title":"The Theory of Industrial Organization","author":"J. Tirole","year":"1988"},{"issue":"1","key":"42","doi-asserted-by":"crossref","first-page":"25","DOI":"10.1002\/mde.4090050106","article-title":"Entry, exit and profitability","volume":"5","author":"G. van Herck","year":"1984","journal-title":"Managerial and Decision Economics"},{"key":"43","unstructured":"Varian, H. R. Managing online security risks. <i>New York Times<\/i> (June 1, 2000) (available at <a target=\"_blank\" href='http:\/\/www.nytimes.com\/library\/financial\/columns\/060100econ-scene.html'>www.nytimes.com\/library\/financial\/columns\/060100econ-scene.html<\/a>"}],"container-title":["Journal of Management Information Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.tandfonline.com\/doi\/pdf\/10.2753\/MIS0742-1222290204","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,7,6]],"date-time":"2019-07-06T08:49:39Z","timestamp":1562402979000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.tandfonline.com\/doi\/full\/10.2753\/MIS0742-1222290204"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012,10]]},"references-count":43,"journal-issue":{"issue":"2","published-online":{"date-parts":[[2014,12,8]]},"published-print":{"date-parts":[[2012,10]]}},"alternative-id":["10.2753\/MIS0742-1222290204"],"URL":"https:\/\/doi.org\/10.2753\/mis0742-1222290204","relation":{},"ISSN":["0742-1222","1557-928X"],"issn-type":[{"value":"0742-1222","type":"print"},{"value":"1557-928X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2012,10]]}}}