Let the Pirates Patch? An Economic Analysis of Software Security Patch Restrictions

Terrence August
Terrence August
[email protected]
Rady School of Management, University of California at San Diego, La Jolla, California 92093
Search for more papers by this author
,
Tunay I. Tunca
Tunay I. Tunca
[email protected]
Graduate School of Business, Stanford University, Stanford, California 94305
Search for more papers by this author

Terrence August

[email protected]

Rady School of Management, University of California at San Diego, La Jolla, California 92093

Search for more papers by this author

Tunay I. Tunca

[email protected]

Graduate School of Business, Stanford University, Stanford, California 94305

Search for more papers by this author

Published Online:1 Mar 2008https://doi.org/10.1287/isre.1070.0142

Supplemental Material

isre.1070.0142-sm-august_and_tunca_sup.pdf (139 KB)

Cited by
- A review of cybercrime research: Synthesis and future directions
  Information & Management, Vol. 63, No. 5
- Anti-piracy enforcements and innovation quality
  21 February 2026 | European Journal of Law and Economics, Vol. 61, No. 3
- “Extortionality” in Ransomware Attacks: A Microeconomic Study of Extortion and Externality
  Debabrata Dey,
  Atanu Lahiri
  2 May 2025 | Information Systems Research, Vol. 37, No. 1
- Customization or jailbreaking for bloatware: strategic impacts of consumer-initiated behavior of software products
  Expert Systems with Applications, Vol. 291
- Using Subsidies, Fines, and Restitution with Budget Balance to Combat Digital Piracy
  Meysam Fereidouni
  Barrie R. Nault
  13 January 2025 | Management Science, Vol. 71, No. 9
- Identifying Interdisciplinary Intersections Through Analytics: Software Piracy Case
  8 January 2024 | Journal of Computer Information Systems, Vol. 65, No. 4
- Freemium vs. Deterrence: Optimizing revenue in the face of piracy competition
  Journal of Business Research, Vol. 194
- Information Security Research in the Information Systems Discipline: A Thematic Review and Future Research Directions
  31 July 2024 | ACM SIGMIS Database: the DATABASE for Advances in Information Systems, Vol. 55, No. 3
- Which Enemy to Dance with? A New Role of Software Piracy in Influencing Antipiracy Strategies
  Can Sun,
  Yonghua Ji,
  Xianjun Geng
  3 April 2023 | Information Systems Research, Vol. 34, No. 4
- Risk-ranking matrix for security patching of exploitable vulnerabilities
- Economics of Ransomware: Risk Interdependence and Large-Scale Attacks
  Terrence August,
  Duy Dao,
  Marius Florin Niculescu
  7 March 2022 | Management Science, Vol. 68, No. 12
- The Impact of Revenue Models on Anti-Counterfeiting Measures for Online Intermediaries
  19 October 2021 | Information Systems Frontiers, Vol. 24, No. 6
- Pay-What-You-Want Pricing in the Digital Product Marketplace: A Feasible Alternative to Piracy Prevention?
  Byung Cho Kim,
  So Eun Park,
  Detmar W. Straub
  12 January 2022 | Information Systems Research, Vol. 33, No. 3
- Piracy and Bundling of Information Goods
  26 August 2022 | Journal of Management Information Systems, Vol. 39, No. 3
- Circumventing Circumvention: An Economic Analysis of the Role of Education and Enforcement
  Debabrata Dey,
  Abhijeet Ghoshal,
  Atanu Lahiri
  11 August 2021 | Management Science, Vol. 68, No. 4
- Piracy as an entry deterrence strategy in software market
  European Journal of Operational Research, Vol. 298, No. 2
- Managing digital piracy under consumer valuation uncertainty: The roles of product demonstrations and antipiracy measures
  Information & Management, Vol. 59, No. 2
- Optimal adoptions of freemium version and patching strategy: Network and security externalities
  Journal of Management Science and Engineering, Vol. 7, No. 1
- Strategic roles of IT modernization and cloud migration in reducing cybersecurity risks of organizations: The case of U.S. federal government
  The Journal of Strategic Information Systems, Vol. 31, No. 1
- Will foundry become a competitor of manufacturer in ODM supply chain?
  3 August 2021 | Journal of Modelling in Management, Vol. 17, No. 1
- Guns, Privacy, and Crime
  1 January 2022 | SSRN Electronic Journal, Vol. 21
- Patching zero-day vulnerabilities: an empirical analysis
  18 November 2021 | Journal of Cybersecurity, Vol. 7, No. 1
- Support Forums and Software Vendor’s Pricing Strategy
  Debabrata Dey,
  Abhijeet Ghoshal,
  Atanu Lahiri
  11 February 2021 | Information Systems Research, Vol. 32, No. 2
- Is Imitation Bad for the Production of Creative Works?
  6 January 2021 | Review of Network Economics, Vol. 19, No. 2
- The Roles of IT Strategies and Security Investments in Reducing Organizational Security Breaches
  2 April 2021 | Journal of Management Information Systems, Vol. 38, No. 1
- Emics and Etics of Usable Security: Culturally-Specific or Culturally-Universal?
  3 July 2021
- The Pricing Strategy of Software
  15 October 2020
- Illegal Content Monitoring on Social Platforms
  1 August 2020 | Production and Operations Management, Vol. 29, No. 8
- Centralized IT Decision Making and Cybersecurity Breaches: Evidence from U.S. Higher Education Institutions
  18 November 2020 | Journal of Management Information Systems, Vol. 37, No. 3
- Access Pricing to An Operating System Platform when Piracy Matters
  11 April 2020 | Journal of Systems Science and Systems Engineering, Vol. 29, No. 2
- Bloatware and Jailbreaking: Strategic Impacts of Consumer-Initiated Modification of Technology Products
  Hasan Cavusoglu,
  Huseyin Cavusoglu,
  Xianjun Geng
  16 March 2020 | Information Systems Research, Vol. 31, No. 1
- Do Reputational Sanctions Deter Negligence in Information Security Management? A Field Quasi‐Experiment
  1 February 2020 | Production and Operations Management, Vol. 29, No. 2
- Online Piracy and the “Longer Arm” of Enforcement
  Debabrata Dey,
  Antino Kim,
  Atanu Lahiri
  7 May 2018 | Management Science, Vol. 65, No. 3
- Support Forums and Software Vendor's Pricing Strategy
  SSRN Electronic Journal, Vol. 90
- Digital Piracy and Bundling of Information Goods
  SSRN Electronic Journal, Vol. 90
- The “Invisible Hand”of Piracy: An Economic Analysis of the Information-Goods Supply Chain1
  1 December 2018 | MIS Quarterly, Vol. 42, No. 4
- Strategic Aspects of Cyber Risk Information Sharing
  13 November 2017 | ACM Computing Surveys, Vol. 50, No. 5
- Piracy on the Internet: Accommodate it or fight it? A dynamic approach
  European Journal of Operational Research, Vol. 266, No. 1
- Optimal software upgrade strategy: Should we sell products or premium services in the presence of piracy?
  Electronic Commerce Research and Applications, Vol. 28
- A Review of Ethical Issue Considerations in the Information Systems Research Literature
  21 February 2018 | Foundations and Trends® in Information Systems, Vol. 2, No. 2
- Law and Economics of Copyright and Trademarks on the Internet
  15 February 2018
- Circumventing Circumvention: An Economic Analysis of the Role of Education and Enforcement
  SSRN Electronic Journal, Vol. 19
- Drawing a Line in the Sand: Commitment Problem in Ending Software Support1
  1 December 2017 | MIS Quarterly, Vol. 41, No. 4
- Why security and privacy research lies at the centre of the information systems (IS) artefact: proposing a bold research agenda
  15 February 2018 | European Journal of Information Systems, Vol. 26, No. 6
- Information Feedback, Targeting, and Coordination: An Experimental Study
  Matthew J. Hashim,
  Karthik N. Kannan,
  Sandra Maximiano
  23 March 2017 | Information Systems Research, Vol. 28, No. 2
- The Work-Averse Cyber Attacker Model: Theory and Evidence From Two Million Attack Signatures
  SSRN Electronic Journal, Vol. 4
- Security Breaches in the U.S. Federal Government
  SSRN Electronic Journal, Vol. 22
- Managing Enterprise Risks of Technological Systems: An Exploratory Empirical Analysis of Vulnerability Characteristics as Drivers of Exploit Publication*
  8 January 2016 | Decision Sciences, Vol. 47, No. 6
- Economic and Policy Implications of Restricted Patch Distribution
  Karthik Kannan,
  Mohammad S. Rahman,
  Mohit Tawarmalani
  2 March 2016 | Management Science, Vol. 62, No. 11
- Mandatory Standards and Organizational Information Security
  Chul Ho Lee,
  Xianjun Geng,
  Srinivasan Raghunathan
  15 February 2016 | Information Systems Research, Vol. 27, No. 1
- Optimal Pricing of Information Goods under the Freemium Strategy in the Presence of Piracy and Network Effects
  SSRN Electronic Journal, Vol. 19
- IT Governance, Security Outsourcing, and Cybersecurity Breaches: Evidence from the U.S. Higher Education
  SSRN Electronic Journal, Vol. 2
- The Impact of Security Risk on Free Trial Strategy for Software Market
  13 October 2015
- Information Disclosure and the Diffusion of Information Security Attacks
  Sabyasachi Mitra,
  Sam Ransbotham
  18 August 2015 | Information Systems Research, Vol. 26, No. 3
- Optimal Timing of Sequential Distribution: The Impact of Congestion Externalities and Day-and-Date Strategies
  Terrence August,
  Duy Dao,
  Hyoduk Shin
  17 September 2015 | Marketing Science, Vol. 34, No. 5
- Optimal Digital Rights Management with Uncertain Piracy
  26 February 2015 | Decision Sciences, Vol. 46, No. 1
- Overcoming Free-Riding in Information Goods: Sanctions or Rewards?
- Cloud Implications on Software Network Structure and Security Risks
  Terrence August,
  Marius Florin Niculescu,
  Hyoduk Shin
  21 July 2014 | Information Systems Research, Vol. 25, No. 3
- Quality Competition and Market Segmentation in the Security Software Market1
  1 June 2014 | MIS Quarterly, Vol. 38, No. 2
- Overcoming Free-Riding in Information Goods: Sanctions or Rewards?
  SSRN Electronic Journal, Vol. 85
- Licensing and Competition for Services in Open Source Software
  Terrence August,
  Hyoduk Shin,
  Tunay I. Tunca
  15 July 2013 | Information Systems Research, Vol. 24, No. 4
- The Influence of Software Process Maturity and Customer Error Reporting on Software Release and Pricing
  Terrence August,
  Marius Florin Niculescu
  14 June 2013 | Management Science, Vol. 59, No. 12
- Competing with Piracy: A Multichannel Sequential Search Approach
  8 December 2014 | Journal of Management Information Systems, Vol. 30, No. 2
- Fighting Fire with Fire: Commercial Piracy and the Role of File Sharing on Copyright Protection Policy for Digital Goods
  Tunay I. Tunca,
  Qiong Wu,
  26 June 2012 | Information Systems Research, Vol. 24, No. 2
- Effects of Piracy on Quality of Information Goods
  Atanu Lahiri,
  Debabrata Dey,
  8 October 2012 | Management Science, Vol. 59, No. 1
- The Impact of Immediate Disclosure on Attack Diffusion and Volume
  27 July 2012
- Law and Economics of Copyright and Trademarks on the Internet
  7 December 2016
- Quality Competition in the Security Software Market
- Hacker Behavior, Network Effects, and the Security Software Market
  8 December 2014 | Journal of Management Information Systems, Vol. 29, No. 2
- Revisiting the incentive to tolerate illegal distribution of software products
  Decision Support Systems, Vol. 53, No. 2
- Are Markets For Vulnerabilities Effective?1
  1 March 2012 | MIS Quarterly, Vol. 36, No. 1
- Implications of Negative Network Effect in the Security Software Market
- Optimal Digital Rights Management with Uncertain Piracy
- Information Feedback, Targeting, and Coordination: An Experimental Study
  SSRN Electronic Journal, Vol. 58
- Untangling the Web of Relationships between Wealth, Culture, and Global Software Piracy Rates
- The Effect of Liability and Patch Release on Software Security: The Monopoly Case
  1 July 2011 | Production and Operations Management, Vol. 20, No. 4
- Who Should Be Responsible for Software Security? A Comparative Analysis of Liability Policies in Network Environments
  Terrence August,
  Tunay I. Tunca,
  25 March 2011 | Management Science, Vol. 57, No. 5
- Revisiting the Incentive to Tolerate Illegal Distribution of Software Products
- Optimal Timing of Sequential Distribution: The Impact of Congestion Externalities and Day-and-Date Strategies
  SSRN Electronic Journal, Vol. 32
- Responsibility for the Harm and Risk of Software Security Flaws
- The Impact of Malicious Agents on the Enterprise Software Industry1
  1 September 2010 | MIS Quarterly, Vol. 34, No. 3
- Piracy-Minimizing Non-Linear Pricing of Differentiated Digital Goods in Client-Server Networks, and Distribution Choices Under Constrained Transferable Utility
  SSRN Electronic Journal, Vol. 10
- Piracy-Minimizing Non-Linear Pricing Of Digital Goods With Unknown Demand And Price-Based Coordination In 'Open Cooperative' Peer-To-Peer Networks
  SSRN Electronic Journal, Vol. 199
- Maxi-Min Non-Linear Pricing of Differentiated Digital Goods in 'Monitored Closed' Peer-to-Peer Networks under Un-Constrained Transferable Utility and Unknown Demand, and the Firm’s Distribution Choices
  SSRN Electronic Journal, Vol. 199
- Untangling the Web of Relationships Between Wealth, Culture, and Global Software Piracy Rates
  Journal of Global Information Management, Vol. 18, No. 1
- An Economic Analysis of the Software Market with a Risk-Sharing Mechanism
  8 December 2014 | International Journal of Electronic Commerce, Vol. 14, No. 2
- Configuration of and Interaction Between Information Security Technologies: The Case of Firewalls and Intrusion Detection Systems
  Huseyin Cavusoglu,
  Srinivasan Raghunathan,
  Hasan Cavusoglu,
  26 February 2009 | Information Systems Research, Vol. 20, No. 2
- Dynamics of organizational information security
  13 November 2008 | System Dynamics Review, Vol. 24, No. 3
- Security Patch Management: Share the Burden or Share the Damage?
  Hasan Cavusoglu,
  Huseyin Cavusoglu,
  Jun Zhang,
  1 April 2008 | Management Science, Vol. 54, No. 4
- Software Licensing: Pay-Per-Use versus Perpetual
  SSRN Electronic Journal, Vol. 45

cover image Information Systems Research

Volume 19, Issue 1

March 2008

Pages 1-123

Article Information

Supplemental Material

Metrics

Information

Received:May 09, 2006
Published Online:March 01, 2008

Cite as

Terrence August, Tunay I. Tunca, (2008) Let the Pirates Patch? An Economic Analysis of Software Security Patch Restrictions. Information Systems Research 19(1):48-70.

https://doi.org/10.1287/isre.1070.0142

Keywords

PDF download

Available Issues

Available Issues

Available Issues

Available Issues

Available Issues

Let the Pirates Patch? An Economic Analysis of Software Security Patch Restrictions

Supplemental Material

Volume 19, Issue 1

Article Information

Supplemental Material

Metrics

Information

Cite as

Keywords

Sign Up for INFORMS Publications Updates and News