System Reliability and Free Riding: Difference between revisions
| (10 intermediate revisions by 2 users not shown) | |||
| Line 12: | Line 12: | ||
==Categorization== | ==Categorization== | ||
Issues: [[Economics of Cybersecurity]] | * Issues: [[Economics of Cybersecurity]]; [[Incentives]]; [[Risk Management and Investment]] | ||
==Key Words== | ==Key Words== | ||
Total effort. Reliability depends on the sum of the efforts | [[Keyword_Index_and_Glossary_of_Core_Ideas#Cyber_Security_as_an_Externality | Cybersecurity as an Externality]], | ||
exerted by the individuals. | [[Keyword_Index_and_Glossary_of_Core_Ideas#Cyber_Security_as_a_Public_Good | Cybersecurity as a Public Good]], | ||
[[Keyword_Index_and_Glossary_of_Core_Ideas#Information_Asymmetries | Information Asymmetries]], | |||
[[Keyword_Index_and_Glossary_of_Core_Ideas#Interdependencies | Interdependencies]] | |||
==Synopsis== | |||
System reliability often depends on the effort of many individuals, making reliability a public good. It is well-known that purely voluntary provision of public goods may result in a free rider problem: individuals may tend to shirk, resulting in an inefficient level of the public good. How much effort each individual exerts will depend on his own benefits and costs, the efforts exerted by the other individuals, and the technology that relates individual effort to outcomes. In the context of system reliability, we can distinguish three prototype cases. | |||
*Total effort. Reliability depends on the sum of the efforts exerted by the individuals. | |||
Weakest link. Reliability depends on the minimum effort. | *Weakest link. Reliability depends on the minimum effort. | ||
Best shot. Reliability depends on the maximum effort. | *Best shot. Reliability depends on the maximum effort. | ||
Each of these is a reasonable technology in different circumstances. Suppose that there is one wall defending a | Each of these is a reasonable technology in different circumstances. Suppose that there is one wall defending a | ||
| Line 32: | Line 40: | ||
these cases. | these cases. | ||
The motivating example for the research reported here is | The motivating example for the research reported here is computer system reliability and security where teams of programmers and system administrators create systems whose reliability depends on the effort they expend. In this sort of case, considerations of costs, benefits, and probability of | ||
computer system reliability and security where teams of programmers and system administrators create systems whose | failure become paramount, with income effects being a secondary concern. | ||
reliability depends on the | |||
of case, considerations of costs, benefits, and probability of | |||
failure become paramount, with income | |||
==Additional Notes and Highlights== | ==Additional Notes and Highlights== | ||
Expertise Required: Economics - High | |||
First published in ''ICEC2003: Fifth International Conference on Electronic Commerce'', N. Sadeh, ed., ACM Press, 2003, pp. 355–366. | First published in ''ICEC2003: Fifth International Conference on Electronic Commerce'', N. Sadeh, ed., ACM Press, 2003, pp. 355–366. | ||
Latest revision as of 11:53, 20 August 2010
Full Title of Reference
System Reliability and Free Riding
Full Citation
Hal Varian, "System Reliability and Free Riding," in Economics of Information Security (L. Jean Camp & Stephen Lewis eds., 2004). Web AltWeb
Categorization
Key Words
Cybersecurity as an Externality, Cybersecurity as a Public Good, Information Asymmetries, Interdependencies
Synopsis
System reliability often depends on the effort of many individuals, making reliability a public good. It is well-known that purely voluntary provision of public goods may result in a free rider problem: individuals may tend to shirk, resulting in an inefficient level of the public good. How much effort each individual exerts will depend on his own benefits and costs, the efforts exerted by the other individuals, and the technology that relates individual effort to outcomes. In the context of system reliability, we can distinguish three prototype cases.
- Total effort. Reliability depends on the sum of the efforts exerted by the individuals.
- Weakest link. Reliability depends on the minimum effort.
- Best shot. Reliability depends on the maximum effort.
Each of these is a reasonable technology in different circumstances. Suppose that there is one wall defending a city and the probability of successful defense depends on the strength of the wall, which in turn depends on the sum of the efforts of the builders. Alternatively, think of the wall as having varying height, with the probability of success depending on the height at its lowest point. Or, finally, think of a there being several walls, where only the highest one matters. Of course, many systems involve a mixture of these cases.
The motivating example for the research reported here is computer system reliability and security where teams of programmers and system administrators create systems whose reliability depends on the effort they expend. In this sort of case, considerations of costs, benefits, and probability of failure become paramount, with income effects being a secondary concern.
Additional Notes and Highlights
Expertise Required: Economics - High
First published in ICEC2003: Fifth International Conference on Electronic Commerce, N. Sadeh, ed., ACM Press, 2003, pp. 355–366.