Regulation/Liability
Anderson, Ross (2001) Why Information Security is Hard
Anderson, Ross and Moore, Tyler (2006) The Economics of Information Security
Grady, Mark and Parisi, Francesco (2006) The Law and Economics of Cybersecurity: An Introduction
Johnson, Vincent R. (2005) Cybersecurity, Identity Theft, and the Limits of Tort Liability