Improving Internet Security through Mandatory Information Disclosure
Conference Proceeding Article
Although disclosure has long been considered as a solution to internalize externalities, mandatory security information disclosure is still in debate. We propose a mandatory disclosure mechanism based on existing data. The information is disclosed as straightforward rankings of organizations for users to understand, interpret, and make comparisons. As a result, the disclosure can influence organizations through reputational effects. We created a public website to disclose information regularly and conducted a quasi-experiment on outgoing spam to test the effectiveness of our mechanism on four matched country groups. For each treated country, we released the ranking list of top 10 most spamming organizations every month, while for the control countries, no information was disclosed. We find that the treatment organizations subject to spam information disclosure reduced significantly more spam than comparison organizations.
Computer Sciences | Information Security | Management Information Systems
Information Systems and Management
2015 48th Hawaii International Conference on System Sciences (HICSS 2015): 5-8 January 2015, Kauai, Hawaii
IEEE Computer Society
City or Country
Los Alamitos, CA
TANG, Qian and Whinston, Andrew B..
Improving Internet Security through Mandatory Information Disclosure. (2015). 2015 48th Hawaii International Conference on System Sciences (HICSS 2015): 5-8 January 2015, Kauai, Hawaii. 4813-4823. Research Collection School Of Information Systems.
Available at: http://ink.library.smu.edu.sg/sis_research/2637