Chilling Effect of the Enforcement of Computer Misuse Act: Evidence from Publicly Accessible Hack Forums

References

• Alvarez EL, Christensen S (2021) A class of solvable multidimensional stopping problems in the presence of Knightian uncertainty. Adv. Appl. Probability 53(2):400–424.Crossref, Google Scholar
• Angrist JD, Pischke J-S (2008) Parallel worlds: Fixed effects, differences-in-differences, and panel data. Mostly Harmless Econometrics (Princeton University Press, Princeton, NJ), 221–248.Crossref, Google Scholar
• Anscombe FJ, Aumann R (1963) A definition of subjective probability. Ann. Math. Statist. 34(1):199–205.Crossref, Google Scholar
• Autor DH (2003) Outsourcing at will: The contribution of unjust dismissal doctrine to the growth of employment outsourcing. J. Labor Econom. 21(1):1–42.Crossref, Google Scholar
• Bapna R, Umyarov A (2015) Do your online friends make you pay? A randomized field experiment on peer influence in online social networks. Management Sci. 61(8):1902–1920.Link, Google Scholar
• Basili M (2001) Knightian uncertainty in financial markets: An assessment. Econom. Notes 30:1–26.Crossref, Google Scholar
• Bedi S (2021) The myth of the chilling effect. Harvard J. Law Tech. 35(1):267–307.Google Scholar
• Benjamin V, Valacich JS, Chen H (2019) DICE-E: A framework for conducting darknet identification, collection, evaluation with ethics. Management Inform. Systems Quart. 43(1):1–22.Crossref, Google Scholar
• Bertrand M, Duflo E, Mullainathan S (2004) How much should we trust differences-in-differences estimates? Quart. J. Econom. 119(1):249–275.Crossref, Google Scholar
• Bewley TF (2002) Knightian decision theory. Part I. Decisions Econom. Finance 25(2):79–110.Crossref, Google Scholar
• Bewley TF (2011) Knightian decision theory and econometric inferences. J. Econom. Theory 146(3):1134–1147.Crossref, Google Scholar
• Bhide A (2021) Entrepreneurial specialization: How subjective (‘Knightian’) uncertainty matters. Preprint, submitted November 23, https://ssrn.com/abstract=3970310.Google Scholar
• Bradford B, Hohl K, Jackson J, MacQueen S (2015) Obeying the rules of the road: Procedural justice, social identity, and normative compliance. J. Contemporary Criminal Justice 31(2):171–191.Crossref, Google Scholar
• Burtch G, Carnahan S, Greenwood BN (2018) Can you gig it? An empirical examination of the gig economy and entrepreneurial activity. Management Sci. 64(12):5497–5520.Link, Google Scholar
• Caballero RJ (2010) Sudden financial arrest. IMF Econom. Rev. 58(1):6–36.Google Scholar
• Calder A, Watkins SG (2007) A Dictionary of Information Security Terms, Abbreviations and Acronyms (IT Governance, Cambridgeshire, UK).Google Scholar
• Chan J, Ghose A (2014) Internet’s dirty secret. Management Inform. Systems Quart. 38(4):955–976.Crossref, Google Scholar
• Chan J, He S, Qiao D, Whinston AB (2023) Shedding light on the dark: The impact of legal enforcement on darknet transactions. Inform. Systems Res., ePub ahead of print May 4, https://doi.org/10.1287/isre.2023.1222.Link, Google Scholar
• Chang YC (2012) Cybercrime in the Greater China Region: Regulatory Responses and Crime Prevention Across the Taiwan Strait (Edward Elgar Publishing, Cheltenham, UK).Crossref, Google Scholar
• Chen Y, He W (2013) Security risks and protection in online learning: A survey. Internat. Rev. Res. Open Distributed Learn. 14(5):108–127.Crossref, Google Scholar
• DHS (2013) DHS media monitoring analyst manual: Publicly available social media monitoring and situational awareness initiative updates. Accessed September 15, 2021, https://zh.scribd.com/document/212403734/DHS-Media-Monitoring-Analyst-Manual-August-2013.Google Scholar
• Ellsberg D (1961) Risk, ambiguity, and the savage axioms. Quart. J. Econom. 75(4):643–669.Crossref, Google Scholar
• ENISA (2016) Good practice guide on vulnerability disclosure. From challenges to recommendations. Accessed October 14, 2021, https://www.enisa.europa.eu/publications/vulnerability-disclosure.Google Scholar
• FeldmanHall O, Shenhav A (2019) Resolving uncertainty in a social world. Nature Human Behav. 3(5):426–435.Crossref, Google Scholar
• Gamero-Garrido A, Savage S, Levchenko K, Snoeren AC (2017) Quantifying the pressure of legal risks on third-party vulnerability research. Thuraisingham B, Evans D, Malkin T, Xu D, eds. Proc. ACM SIGSAC Conf. on Computer and Comm. Security (Association for Computing Machinery, New York), 1501–1513.Google Scholar
• Government (2021) Computer Misuse Act 1990: Call for information. Accessed June 12, 2023, https://www.gov.uk/government/consultations/computer-misuse-act-1990-call-for-information/computer-misuse-act-1990-call-for-information-accessible-version.Google Scholar
• Greenwood BN, Wattal S (2017) Show me the way to go home: An empirical investigation of ride-sharing and alcohol related motor vehicle fatalities. Management Inform. Systems Quart. 41(1):163–187.Crossref, Google Scholar
• Grimes RA (2017) Hacking the Hacker: Learn From the Experts Who Take Down Hackers (John Wiley & Sons, Hoboken, NJ).Crossref, Google Scholar
• Guinchard A (2018) Transforming the Computer Misuse Act 1990 to support vulnerability research? Proposal for a defence for hacking as a strategy in the fight against cybercrime. J. Inform. Rights Policy 2(2):1–33.Google Scholar
• Han J, Kamber M, Pei J (2012) Clustering Analysis (Elsevier, New York).Google Scholar
• Hogg MA (2007) Uncertainty-identity theory. Adv. Experiment. Soc. Psych. 39:69–126.Crossref, Google Scholar
• Hogg MA (2012) Uncertainty-identity theory. Lange PAMV, Kruglanski AW, Higgins AET, eds. Handbook of Theories of Social Psychology (Sage Publications), 62–80.Crossref, Google Scholar
• Hui KL, Kim SH, Wang QH (2017) Cybercrime deterrence and international legislation: Evidence from distributed denial of service attacks. Management Inform. Systems Quart. 41(2):497–523.Crossref, Google Scholar
• Jann B (2005) KDENS: Stata module for univariate kernel density estimation. Accessed September 1, 2023, https://ideas.repec.org/c/boc/bocode/s456410.html.Google Scholar
• Jones MC (1993) Simple boundary correction for kernel density estimation. Statistics Computing. 3(3):135–146.Crossref, Google Scholar
• Kan M (2016) Hacking forum cuts section allegedly linked to DDoS attacks. Accessed Oct 14, 2021, https://www2.cio.com.au/article/609346/hacking-forum-cuts-section-allegedly-linked-ddos-attacks/.Google Scholar
• Kaplow L (2011) Optimal proof burdens, deterrence, and the chilling of desirable behavior. Amer. Econom. Rev. 101(3):277–280.Crossref, Google Scholar
• Katyal NK (1996) Deterence’s difficulty. Michigan Law Rev. 95:2385.Crossref, Google Scholar
• Katyal NK (2001) Criminal law in cyberspace. University Pennsylvania Law Rev. 149(4):1003–1114.Crossref, Google Scholar
• Kendrick L (2012) Speech, intent, and the chilling effect. William Mary Law Rev. 54:1633.Google Scholar
• Khern-am-nuai W, Kannan K, Ghasemkhani H (2018) Extrinsic vs. intrinsic rewards for contributing reviews in an online platform. Inform. Systems Res. 29(4):871–892.Link, Google Scholar
• Kim SH, Wang Q-H, Ullrich JB (2012) A comparative study of cyberattacks. Comm. ACM 55(3):66–73.Crossref, Google Scholar
• Kirsch C (2014) The grey hat hacker: Reconciling cyberspace reality and the law. Northern Kentucky Law Rev. 41:383.Google Scholar
• Knight FH (1921) Risk, Uncertainty and Profit (Houghton Mifflin, Boston).Google Scholar
• Li W, Chen H (2022) Discovering emerging threats in the hacker community: A nonparametric emerging topic detection framework. Management Inform. Systems Quart. 46(4):2337–2350.Crossref, Google Scholar
• Lin M, Lucas HC Jr, Shmueli G (2013) Research commentary—too big to fail: large samples and the p-value problem. Inform. Systems Res. 24(4):906–917.Google Scholar
• Marthews A, Tucker C (2017) Government surveillance and Internet search behavior. Preprint, submitted February 17, http://dx.doi.org/10.2139/ssrn.2412564.Google Scholar
• Meyer BD (1995) Natural and quasi-experiments in economics. J. Bus. Econom. Statist. 13(2):151–161.Google Scholar
• McCallion J (2021) What is the computer misuse act. Accessed June 12, 2023, https://www.itpro.co.uk/it-legislation/28174/what-is-the-computer-misuse-act.Google Scholar
• Pastrana S, Hutchings A, Caines A, Buttery P (2018) Characterizing eve: Analysing cybercrime actors in a large underground forum. Bailey M, Holz T, Stamatogiannakis M, Ioannidis S, eds. Proc. Internat. Sympos. on Res. in Attacks, Intrusions, and Defenses (Springer International Publishing, Cham, Switzerland), 207–227.Google Scholar
• Penney JW (2016) Chilling effects: Online surveillance and Wikipedia use. Berkeley Tech. Law J. 31:117–182.Google Scholar
• Penney J (2022) Understanding chilling effects. Minnesota Law Rev. 106(3):1451–1530.Google Scholar
• Png IP, Wang CY, Wang QH (2008) The deterrent and displacement effects of information security enforcement: International evidence. J. Management Inform. Systems 25(2):125–144.Crossref, Google Scholar
• Porter MF (1980) An algorithm for suffix stripping. Program: Electron. Library Inform. Syst. 14(3):130–137.Google Scholar
• Richards NM (2012) The dangers of surveillance. Harvard Law Rev. 126:1934–1965.Google Scholar
• Roloff ME, Cloven DH (1990) The Chilling Effect in Interpersonal Relationships: The Reluctance to Speak One’s Mind. The International Communication Association, Dublin, Ireland (Lawrence Erlbaum Associates, Mahwah, NJ).Google Scholar
• Rubin DB (1974) Estimating causal effects of treatments in randomized and nonrandomized studies. J. Ed. Psych. 66(5):688–701.Crossref, Google Scholar
• Sam MS (2013) PsychologyDictionary.org. Accessed September 1, 2023, https://psychologydictionary.org/group-identification/.Google Scholar
• Samtani S, Chai Y, Chen H (2022) Linking exploits from the dark web to known vulnerabilities for proactive cyber threat intelligence: An attention-based deep structured semantic model. Management Inform. Systems Quart. 46(2):911–946.Crossref, Google Scholar
• Sautua SI (2017) Does uncertainty cause inertia in decision making? An experimental study of the role of regret aversion and indecisiveness. J. Econom. Behav. Organ. 136(April):1–14.Crossref, Google Scholar
• Schauer F (1978) Fear, risk and the first amendment: Unraveling the chilling effect. Boston University Law Rev. 58:685–732.Google Scholar
• Sherman LW (1993) Defiance, deterrence, and irrelevance: A theory of the criminal sanction. J. Res. Crime Delinquency 30(4):445–473.Crossref, Google Scholar
• Solove D (2007) The First Amendment as criminal procedure. New York University Law Rev. 82:112–176.Google Scholar
• Stoycheff E, Liu J, Xu K, Wibowo K (2019) Privacy and the panopticon: Online mass surveillance’s deterrence and chilling effects. New Media Soc. 21(3):602–619.Crossref, Google Scholar
• Wang QH, Kim SH (2009) Cyberattacks: Does physical boundary matter? Chen H, Slaughter S, eds. Proc. Internat. Conf. of Inform. Systems, 48 (Association for Information Systems elibrary, Atlanta).Google Scholar
• Wang QH, Miller SM, Deng RH (2020) Driving cybersecurity policy insights from information on the Internet. IEEE Security Privacy 18(6):42–50.Crossref, Google Scholar
• Wikipedia (2022) Overseas Chinese. Accessed June 12, 2023, https://en.wikipedia.org/wiki/Overseas_Chinese.Google Scholar
• Williams P (1976) Indeterminate probabilities. Formal Methods in the Methodology of Empirical Sciences (Ossolineum and Reidel, Dordrecht, Netherlands), 229–246.Crossref, Google Scholar
• Xu Y (2012) A comparative study on feature selection in Chinese Spam Filtering. Proc. 6th Internat. Conf. on Appl. of Inform. and Comm. Technologies (IEEE, Piscataway, NJ), 1–6.Google Scholar
• Yu W, Wang X, Calyam P, Xuan D, Zhao W (2010) Modeling and detection of camouflaging worm. IEEE Trans. Dependable Secure Comput. 8(3):377–390.Crossref, Google Scholar
• Yue WT, Wang QH, Hui KL (2019) See no evil, hear no evil? Dissecting the impact of online hacker forums. Management Inform. Systems Quart. 43(1):73–95.Crossref, Google Scholar