Abstract:At present, businesses can reap impressive benefits from the Internet of Things (IoT). However, with the increasing number of IoT devices and the complexity of the IoT ecosystem, there is a growing concern about security vulnerabilities. This study aims to address the network security investment problem in an IoT environment by developing a game-theoretical model. It examines the impact of IoT service level and customer characteristics on the incentives for both the IoT platform and the manufacturer to invest in security, as well as the platform's profitability. Through analytical analysis, several noteworthy findings are obtained. Firstly, it is found that a higher IoT platform service level corresponds to a higher security responsibility. As a result, the platform needs to carefully consider the costs and benefits associated with security investment and service provision. Additionally, the research demonstrates that both the platform and the manufacturer's efforts to enhance security do not diminish, even when faced with increasing customer losses due to security breaches. This is because the IoT platform indirectly benefits a larger number of consumers who purchase smart devices, thus motivating the platform to prioritize network security efforts. Furthermore, the study reveals the influence of the unit security cost and the amount of highly sensitive customers on the security efforts undertaken by both the IoT platform and the smart device manufacturer. These results have important practical implications for firms operating within an IoT-based supply chain. Specifically, the findings can provide valuable decision-making guidance for enterprises seeking digital transformation and trying to make informed choices regarding platform operations.

Economics of Information Security Investment Integrated with IDS and Attacker’s Behavior

The Equilibrium Analysis of Organization Information Security Investment Game

Information Security Investment Game with Penalty Parameter

Information Security Problem Research Based on Game Theory

Information Security Game Analysis with Penalty Parameter

Sustainability of Information Security Investment in Online Social Networks: an Evolutionary Game-Theoretic Approach

Information security investment with budget constraint and security information sharing in resource-sharing environments

Security Control for Networked Control Systems with Randomly Occurring Integrity Check Protection Subject to Randomly Occurring Zero-Value Attacks

Understanding the Cost associated with Data Security Breaches.

A game-theoretic analysis of information security investment for multiple firms in a network

Knowledge sharing and investment decisions in information security

Decision making of optimal investment in information security for complementary enterprises based on game theory

Cyber-Security Investment in the Context of Disruptive Technologies: Extension of the Gordon-Loeb Model

Information Security Investment with Different Information Types: A Two-Firm Analysis.

Where is IT in Information Security? The Interrelationship among IT Investment, Security Awareness, and Data Breaches

Information security breaches and IT security investments: Impacts on competitors

Modeling Internet Security Investments: The Case of Dealing with Information Uncertainty

Internet of Things Network Security Improvement Investment

Security Investment Over Networks with Bounded Rational Agents: Analysis and Distributed Algorithm

Comparing Decision Support Approaches for Cyber Security Investment

Pricing and Investments in Internet Security: A Cyber-Insurance Perspective