Abstract:At present, businesses can reap impressive benefits from the Internet of Things (IoT). However, with the increasing number of IoT devices and the complexity of the IoT ecosystem, there is a growing concern about security vulnerabilities. This study aims to address the network security investment problem in an IoT environment by developing a game-theoretical model. It examines the impact of IoT service level and customer characteristics on the incentives for both the IoT platform and the manufacturer to invest in security, as well as the platform's profitability. Through analytical analysis, several noteworthy findings are obtained. Firstly, it is found that a higher IoT platform service level corresponds to a higher security responsibility. As a result, the platform needs to carefully consider the costs and benefits associated with security investment and service provision. Additionally, the research demonstrates that both the platform and the manufacturer's efforts to enhance security do not diminish, even when faced with increasing customer losses due to security breaches. This is because the IoT platform indirectly benefits a larger number of consumers who purchase smart devices, thus motivating the platform to prioritize network security efforts. Furthermore, the study reveals the influence of the unit security cost and the amount of highly sensitive customers on the security efforts undertaken by both the IoT platform and the smart device manufacturer. These results have important practical implications for firms operating within an IoT-based supply chain. Specifically, the findings can provide valuable decision-making guidance for enterprises seeking digital transformation and trying to make informed choices regarding platform operations.

A game-theoretic analysis of information security investment for multiple firms in a network

Information Security Investment Game with Penalty Parameter

The Equilibrium Analysis of Organization Information Security Investment Game

Information Security Problem Research Based on Game Theory

Information Security Game Analysis with Penalty Parameter

Information security investment with budget constraint and security information sharing in resource-sharing environments

Protecting shared information in networks: a network security game with strategic attacks

Sustainability of Information Security Investment in Online Social Networks: an Evolutionary Game-Theoretic Approach

Internet of Things Network Security Improvement Investment

Modeling Internet Security Investments: The Case of Dealing with Information Uncertainty

Decision making of optimal investment in information security for complementary enterprises based on game theory

Stackelberg Interdependent Security Game in Distributed and Hierarchical Cyber-Physical Systems

Information security investment for complementary and substitutable firms: The role of technology similarity

How bad are selfish investments in network security?

Security Investment in Cyber-Physical Systems: Stochastic Games With Asymmetric Information and Resource Constrained Players

A Dynamic Game Approach to Designing Secure Interdependent IoT-Enabled Infrastructure Network

Knowledge sharing and investment decisions in information security

Information Security Investment with Different Information Types: A Two-Firm Analysis.

Network security and contagion

Interdependent Strategic Security Risk Management With Bounded Rationality in the Internet of Things

Security Investment Over Networks with Bounded Rational Agents: Analysis and Distributed Algorithm