Title

Improving Internet Security through Mandatory Information Disclosure

Publication Type

Conference Proceeding Article

Publication Date

1-2015

Abstract

Although disclosure has long been considered as a solution to internalize externalities, mandatory security information disclosure is still in debate. We propose a mandatory disclosure mechanism based on existing data. The information is disclosed as straightforward rankings of organizations for users to understand, interpret, and make comparisons. As a result, the disclosure can influence organizations through reputational effects. We created a public website to disclose information regularly and conducted a quasi-experiment on outgoing spam to test the effectiveness of our mechanism on four matched country groups. For each treated country, we released the ranking list of top 10 most spamming organizations every month, while for the control countries, no information was disclosed. We find that the treatment organizations subject to spam information disclosure reduced significantly more spam than comparison organizations.

Discipline

Computer Sciences | Information Security | Management Information Systems

Research Areas

Information Systems and Management

Publication

2015 48th Hawaii International Conference on System Sciences (HICSS 2015): 5-8 January 2015, Kauai, Hawaii

First Page

4813

Last Page

4823

Identifier

10.1109/HICSS.2015.572

Publisher

IEEE Computer Society

City or Country

Los Alamitos, CA

Additional URL

http://dx.doi.org/10.1109/HICSS.2015.572