Help
Cart
Skip main navigation
Editor's Cut Data Security
Skip main navigation

RESEARCH ARTICLES

INFORMS Journal Articles

Special Section Introduction—Ubiquitous IT and Digital Vulnerabilities

Published Online:

Information Systems Research

    Abstract
    While information technology benefits society in numerous ways, it unfortunately also has potential to create new vulnerabilities. This special issue intends to stimulate thought and research into understanding and mitigating these vulnerabilities. We ...
Choice and Chance: A Conceptual Model of Paths to Information Security Compromise

Published Online:

Information Systems Research

    Abstract
    No longer the exclusive domain of technology experts, information security is now a management issue. Through a grounded approach using interviews, observations, and secondary data, we advance a model of the information security compromise process from ...
Who Should Be Responsible for Software Security? A Comparative Analysis of Liability Policies in Network Environments

Published Online:

Management Science

    Abstract
    In recent years, vendor liability for software security vulnerabilities has been the center of an important debate in the software community and a topic gaining government attention in legislative committees and hearings. The importance of this question ...
Research Note—An Exploration of Risk Characteristics of Information Security Threats and Related Public Information Search Behavior

Published Online:

Information Systems Research

    Abstract
    Information security (IS) threats are increasingly pervasive, and search engines are being used by the public as the primary tool for searching for relevant information. This research investigates the following two questions: (1) How can different IS ...
Coping Responses in Phishing Detection: An Investigation of Antecedents and Consequences

Published Online:

Information Systems Research

    Abstract
    This study investigates users’ coping responses in the process of phishing email detection. Three common responses are identified based on the coping literature: task-focused coping, emotion-focused coping (i.e., worry and self-criticism), and avoidance ...
More Harm Than Good? How Messages That Interrupt Can Make Us Vulnerable

Published Online:

Information Systems Research

    Abstract
    System-generated alerts are ubiquitous in personal computing and, with the proliferation of mobile devices, daily activity. While these interruptions provide timely information, research shows they come at a high cost in terms of increased stress and ...
Mandatory Standards and Organizational Information Security

Published Online:

Information Systems Research

    Abstract
    Mandatory security standards that force firms to establish minimum levels of security controls are enforced in many domains, including information security. The information security domain is characterized by multiple intertwined security controls, not ...
Ensuring Employees' IT Compliance: Carrot or Stick?

Published Online:

Information Systems Research

    Abstract
    With reward (carrot) and punishment (stick) widely applied by organizations to regulate mandatory IT usage, it is imperative to understand how these incentives influence employee compliance behavior. Drawing upon control theory and regulatory focus theory,...
The Role of Extra-Role Behaviors and Social Controls in Information Security Policy Effectiveness

Published Online:

Information Systems Research

    Abstract
    Although most behavioral security studies focus on organizational in-role behaviors such as information security policy (ISP) compliance, the role of organizational extra-role behaviors—security behaviors that benefit organizations but are not specified ...
Optimal Policies for Security Patch Management

Published Online:

INFORMS Journal on Computing

    Abstract
    Effective patch management is critical to ensure the security of information systems that modern organizations count on today. Facing numerous patch releases from vendors, an information technology (IT) manager must weigh the costs of frequent patching ...
Research Note—Patching the Cloud: The Impact of SaaS on Patching Strategy and the Timing of Software Release

Published Online:

Information Systems Research

    Abstract
    This paper extends prior research on the software vendors’ optimal release time and patching strategy in the context of cloud computing and software as a service (SaaS). Traditionally, users are responsible for running on-premises software; by contrast, a ...
Intrusion-Detection Policies for IT Security Breaches

Published Online:

INFORMS Journal on Computing

    Abstract
    Intrusion-detection systems (IDSs) form an important component of IT security architectures, but the low proportion of hackers in the user population severely limits the usefulness of IDSs. Thus, even when the IDS is good, an intrusion signal may not ...
An Approach to Securely Identifying Beneficial Collaboration in Decentralized Logistics Systems

Published Online:

M&SOM

    Abstract
    The problem of sharing manufacturing, inventory, or capacity to improve performance is applicable in many decentralized operational contexts. However, the solution of such problems commonly requires an intermediary or a broker to manage information ...
How to Share “A Really Good Secret”: Managing Sharing/Secrecy Tensions Around Scientific Knowledge Disclosure

Published Online:

Organization Science

    Abstract
    The diffusion of scientific knowledge is critical for innovation, entrepreneurship, and economic growth. Yet scientists face a fundamental dilemma when it comes to sharing such knowledge: sharing can simultaneously advance and challenge both academic and ...

Other Journal Articles

Designing User Incentives for Cybersecurity
Terrence August, Robert August, Hyoduk Shin
Communications of the ACM
Published Online: November 2014

Get Notified on Updated Content

INFORMS site uses cookies to store information on your computer. Some are essential to make our site work; Others help us improve the user experience. By using this site, you consent to the placement of these cookies. Please read our Privacy Statement to learn more.
Agree