Configuration of and Interaction Between Information Security Technologies: The Case of Firewalls and Intrusion Detection Systems

Huseyin Cavusoglu
Huseyin Cavusoglu
[email protected]
School of Management, University of Texas at Dallas, Richardson, Texas 75083
Search for more papers by this author
,
Srinivasan Raghunathan
Srinivasan Raghunathan
[email protected]
School of Management, University of Texas at Dallas, Richardson, Texas 75083
Search for more papers by this author
,
Hasan Cavusoglu
Hasan Cavusoglu
[email protected]
Sauder School of Business, University of British Columbia, Vancouver, British Columbia, V6T 1Z2 Canada
Search for more papers by this author

Huseyin Cavusoglu

[email protected]

School of Management, University of Texas at Dallas, Richardson, Texas 75083

Search for more papers by this author

Srinivasan Raghunathan

[email protected]

School of Management, University of Texas at Dallas, Richardson, Texas 75083

Search for more papers by this author

Hasan Cavusoglu

[email protected]

Sauder School of Business, University of British Columbia, Vancouver, British Columbia, V6T 1Z2 Canada

Search for more papers by this author

Published Online:26 Feb 2009https://doi.org/10.1287/isre.1080.0180

Supplemental Material

isre.1080.0180-sm-cavusoglu_et_al_2009.pdf (418 KB)

Cited by
- Security fatigue: manifestation of emotional exhaustion and cynicism by depletion of self-regulation capacity
  13 February 2026 | European Journal of Information Systems, Vol. 295
- An Economic Analysis of Online Ad Fraud Deterrence
  Min Chen,
  Subodha Kumar,
  Abhishek Ray
  6 February 2026 | Management Science, Vol. 0, No. 0
- How does buffering-bridging alignment influence supply chain resilience? A polynomial regression analysis
  Information & Management, Vol. 63, No. 1
- Network Structures, Audit Policies and the Cost of Security Breaches
  25 June 2025 | Production and Operations Management, Vol. 1
- Decision Making in Information Security Investments: Impact of System Vulnerability and Investment Timing on Resource-Sharing Platforms
  Hui Zhao; ,
  Yong Wu,
  Zhijie Jin
  26 November 2024 | Decision Analysis, Vol. 22, No. 1
- Building cybersecurity resilience: integrating defense and recovery investment strategies in an expected resilience framework
  23 October 2024 | Journal of Enterprise Information Management, Vol. 38, No. 2
- Measuring and Mitigating the Risk of Advanced Cyberattackers
  Amitai Gilad,
  Asher Tishler
  9 September 2024 | Decision Analysis, Vol. 21, No. 4
- Information Security Culture: The Effect of Strategy, Technology, Organization, People and the Environment
- PALM: A framework to identify novel attacks in an e-commerce system
- Information Security Research in the Information Systems Discipline: A Thematic Review and Future Research Directions
  31 July 2024 | ACM SIGMIS Database: the DATABASE for Advances in Information Systems, Vol. 55, No. 3
- Managing cloud security in the presence of strategic hacker and joint responsibility
  26 August 2023 | Journal of the Operational Research Society, Vol. 75, No. 7
- Cyber-risk Management Framework for Online Gaming Firms: an Artificial Neural Network Approach
  9 January 2022 | Information Systems Frontiers, Vol. 25, No. 5
- Mitigating the Risk of Advanced Cyber Attacks: The Role of Quality, Covertness and Intensity of Use of Cyber Weapons
  16 January 2023 | Defence and Peace Economics, Vol. 34, No. 6
- Information security investment with budget constraint and security information sharing in resource-sharing environments
  2 August 2022 | Journal of the Operational Research Society, Vol. 74, No. 6
- Enhancing false negative and positive rates for efficient insider threat detection
  Computers & Security, Vol. 126
- Information sharing and deferral option in cybersecurity investment
  6 February 2023 | PLOS ONE, Vol. 18, No. 2
- Linking Cybersecurity and Accounting: An Event, Impact, Response Framework
  1 November 2021 | Accounting Horizons, Vol. 36, No. 4
- An economic analysis of information security outsourcing with competitive firms
  8 February 2022 | Managerial and Decision Economics, Vol. 43, No. 7
- Information Security Strategies for Information-Sharing Firms Considering a Strategic Hacker
  Yong Wu,
  Mengyao Xu,
  Dong Cheng,
  Tao Dai
  23 March 2022 | Decision Analysis, Vol. 19, No. 2
- An evolutionary game‐theoretic analysis of enterprise information security investment based on information sharing platform
  16 July 2021 | Managerial and Decision Economics, Vol. 43, No. 3
- Towards analyzing the impact of intrusion prevention and response on cyber-physical system availability: A case study of NPP
  Annals of Nuclear Energy, Vol. 168
- Sarima-Based Cyber-Risk Assessment and Mitigation Model for A Smart City’s Traffic Management Systems (Scram)
  18 March 2022 | Journal of Organizational Computing and Electronic Commerce, Vol. 32, No. 1
- A possible conceptualization of the information systems ( IS ) artifact: A general systems theory perspective 1
  28 December 2020 | Information Systems Journal, Vol. 31, No. 4
- Designing Payment Contracts for Healthcare Services to Induce Information Sharing: The Adoption and the Value of Health Information Exchanges (HIEs)
  1 June 2021 | MIS Quarterly, Vol. 45, No. 2
- Social Controls and Bonds of Public Information Consumer on Sustainable Utilization and Provision for Computing
  8 May 2021 | Sustainability, Vol. 13, No. 9
- Do You Have a Room for Us in Your IT? An Economic Analysis of Shared IT Services and Implications for IT Industries
  1 March 2021 | MIS Quarterly, Vol. 45, No. 1
- The Roles of IT Strategies and Security Investments in Reducing Organizational Security Breaches
  2 April 2021 | Journal of Management Information Systems, Vol. 38, No. 1
- Managing Security Outsourcing in the Presence of Strategic Hackers
  Yong Wu,
  Junlin Duan,
  Tao Dai,
  Dong Cheng
  18 March 2020 | Decision Analysis, Vol. 17, No. 3
- Information system security outsourcing and information sharing level decision
  20 August 2020
- Managing Information System Security Under Continuous and Abrupt Deterioration
  1 August 2020 | Production and Operations Management, Vol. 29, No. 8
- Sleeping with the Enemy: An Economic and Security Analysis of Bug Bounty Programs
  SSRN Electronic Journal, Vol. 314
- Organizational practices as antecedents of the information security management performance
  Information Technology & People, Vol. 32, No. 5
- Response awareness and instructional self-efficacy: influences on intent
  26 June 2019 | Information & Computer Security, Vol. 27, No. 4
- Organizational cloud security and control: a proactive approach
  Information Technology & People, Vol. 32, No. 3
- Bilateral Liability-Based Contracts in Information Security Outsourcing
  Kai-Lung Hui,
  Ping Fan Ke,
  Yuxi Yao,
  Wei T. Yue
  23 May 2019 | Information Systems Research, Vol. 30, No. 2
- Configuration of intrusion prevention systems based on a legal user: the case for using intrusion prevention systems instead of intrusion detection systems
  22 September 2018 | Information Technology and Management, Vol. 20, No. 2
- Openness and Security in Cloud Computing Services: Assessment Methods and Investment Strategies Analysis
  IEEE Access, Vol. 7
- Information security: Listening to the perspective of organisational insiders
  4 January 2018 | Journal of Information Science, Vol. 44, No. 6
- Cyber anomaly detection: Using tabulated vectors and embedded analytics for efficient data mining
  6 August 2018 | Journal of Algorithms & Computational Technology, Vol. 12, No. 4
- Social control through deterrence on the compliance with information security policy
  3 July 2018 | Soft Computing, Vol. 22, No. 20
- Factors associated with security/cybersecurity audit by internal audit function
  3 April 2018 | Managerial Auditing Journal, Vol. 33, No. 4
- When Hackers Err: The Impacts of False Positives on Information Security Games
  Bin Mai,
  Shailesh Kulkarni
  17 May 2018 | Decision Analysis, Vol. 15, No. 2
- Why security and privacy research lies at the centre of the information systems (IS) artefact: proposing a bold research agenda
  15 February 2018 | European Journal of Information Systems, Vol. 26, No. 6
- Unifying the Role of IT in Hyperturbulence and Competitive Advantage Via a Multilevel Perspective of IS Strategy1
  1 September 2017 | MIS Quarterly, Vol. 41, No. 3
- Evidence-based security configurations for cloud datastores
  3 April 2017
- Investment strategy analysis of information systems with different security levels
- Deterrence-Driven Algorithms for Audit Under the Sentinel Effect
  SSRN Electronic Journal, Vol. 22
- Payment Mechanisms, Incentives for Adoption And Value of Health-Information Exchanges (HIEs)
  SSRN Electronic Journal, Vol. 29
- When Being Hot Is Not Cool: Monitoring Hot Lists for Information Security
  Yonghua Ji,
  Subodha Kumar,
  Vijay Mookerjee
  29 November 2016 | Information Systems Research, Vol. 27, No. 4
- A differential game approach to security investment and information sharing in a competitive environment
  13 January 2016 | IIE Transactions, Vol. 48, No. 6
- Mandatory Standards and Organizational Information Security
  Chul Ho Lee,
  Xianjun Geng,
  Srinivasan Raghunathan
  15 February 2016 | Information Systems Research, Vol. 27, No. 1
- SECURQUAL: An Instrument for Evaluating the Effectiveness of Enterprise Information Security Programs
  1 August 2015 | Journal of Information Systems, Vol. 30, No. 1
- A game-theory approach to manage decision errors
  8 March 2016 | MATEC Web of Conferences, Vol. 44
- Information security investment for competitive firms with hacker behavior and security requirements
  19 June 2015 | Annals of Operations Research, Vol. 235, No. 1
- Allocation of resources to cyber-security: The effect of misalignment of interest between managers and investors
  Decision Support Systems, Vol. 75
- Security investment and information sharing under an alternative security breach probability function
  23 February 2013 | Information Systems Frontiers, Vol. 17, No. 2
- Influence of trust and perceived value on the intention to purchase travel online: Integrating the effects of assurance on trust antecedents
  Tourism Management, Vol. 47
- Securing interdependent assets
  29 March 2014 | Autonomous Agents and Multi-Agent Systems, Vol. 29, No. 2
- Information Systems Security
  21 January 2015
- Management of Technical Security Measures
- Behavioral Information Security Management
  1 May 2014
- Is Your Banker Leaking Your Personal Information? The Roles of Ethics and Individual-Level Cultural Characteristics in Predicting Organizational Computer Abuse
  25 April 2013 | Journal of Business Ethics, Vol. 121, No. 3
- Information Security Investment When Hackers Disseminate Knowledge
  Xing Gao,
  Weijun Zhong,
  Shue Mei
  2 December 2013 | Decision Analysis, Vol. 10, No. 4
- A game-theory approach to configuration of detection software with decision errors
  Reliability Engineering & System Safety, Vol. 119
- Design and Application of a Policy-Driven Interactive Security Model
  1 August 2013 | Applied Mechanics and Materials, Vol. 347-350
- The configuration and detection strategies for information security systems
  Computers & Mathematics with Applications, Vol. 65, No. 9
- Passenger Profiling and Screening for Aviation Security in the Presence of Strategic Attackers
  Huseyin Cavusoglu,
  Young Kwark,
  Bin Mai,
  Srinivasan Raghunathan,
  20 December 2012 | Decision Analysis, Vol. 10, No. 1
- Management of Technical Security Measures: An Empirical Examination of Personality Traits and Behavioral Intentions
- Technology Related Trust Issues in SME B2B E-Commerce
- Management of Technical Security Measures
  International Journal of Social and Organizational Dynamics in IT, Vol. 3, No. 1
- Quantifying Cyberinfrastructure Resilience against Multi‐Event Attacks
  4 July 2012 | Decision Sciences, Vol. 43, No. 4
- Technology Related Trust Issues in SME B2B E-Commerce
  International Journal of Information Communication Technologies and Human Development, Vol. 3, No. 4
- When Hackers Talk: Managing Information Security Under Variable Attack Rates and Knowledge Dissemination
  Vijay Mookerjee,
  Radha Mookerjee,
  Alain Bensoussan,
  Wei T. Yue,
  8 April 2011 | Information Systems Research, Vol. 22, No. 3
- Decision support for Cybersecurity risk planning
  Decision Support Systems, Vol. 51, No. 3
- Security Assurance: How Online Service Providers Can Influence Security Control Perceptions and Gain Trust
  26 April 2011 | Decision Sciences, Vol. 42, No. 2
- An Analysis of the Impact of Passenger Profiling for Transportation Security
  Huseyin Cavusoglu,
  Byungwan Koh,
  Srinivasan Raghunathan,
  11 May 2010 | Operations Research, Vol. 58, No. 5
- Goals and Practices in Maintaining Information Systems Security
  International Journal of Information Security and Privacy, Vol. 4, No. 3
- Making Sound Security Investment Decisions
  10 September 2014 | Journal of Information Privacy and Security, Vol. 6, No. 1

cover image Information Systems Research

Volume 20, Issue 2

June 2009

Pages 159-316

Article Information

Supplemental Material

Metrics

Information

Received:September 26, 2006
Published Online:February 26, 2009

Cite as

Huseyin Cavusoglu, Srinivasan Raghunathan, Hasan Cavusoglu, (2009) Configuration of and Interaction Between Information Security Technologies: The Case of Firewalls and Intrusion Detection Systems. Information Systems Research 20(2):198-217.

https://doi.org/10.1287/isre.1080.0180

Keywords

PDF download

Available Issues

Available Issues

Available Issues

Available Issues

Available Issues

Configuration of and Interaction Between Information Security Technologies: The Case of Firewalls and Intrusion Detection Systems

Supplemental Material

Volume 20, Issue 2

Article Information

Supplemental Material

Metrics

Information

Cite as

Keywords

Sign Up for INFORMS Publications Updates and News