In this paper, we estimate the impact of enforcing the Convention on Cybercrime (COC) on deterring distributed denial of service (DDOS) attacks. Our data set comprises a sample of real, random spoof-source DDOS attacks recorded in 106 countries in 177 days in the period 2004-2008. We find that enforcing the COC decreases DDOS attacks by at least 11.8 percent, but a similar deterrence effect does not exist if the enforcing countries make a reservation on international cooperation. We also find evidence of network and displacement effects in COC enforcement. Our findings imply attackers in cyberspace are rational, motivated by economic incentives, and strategic in choosing attack targets. We draw related implications.
Cybercrime, deterrence, legislation, law enforcement, convention on cybercrime, distributed denial of service attack
Computer Sciences | Information Security | Internet Law
Information Systems and Management
University of Minnesota, Management Information Systems Research Center
HUI, Kai-Lung; KIM, Seung Hyun; and QIU-HONG WANG.
Cybercrime deterrence and international legislation: Evidence from distributed denial of service attacks. (2017). MIS Quarterly. 41,. Research Collection School Of Information Systems.
Available at: http://ink.library.smu.edu.sg/sis_research/3420