Results

Found 72 articles

Clear filters

Vulnerability-based Cyber-Risk Management: A Text-mining Approach

2023 | Americas Conference on Information Systems | Citations: 0
Authors: Jain, Swati; Mukhopadhyay, Arunabha

Abstract: Vulnerable information systems inside an organization make it prone to cyber-at ... Expand

Abstract: Vulnerable information systems inside an organization make it prone to cyber-attacks, leading to loss of reputation, financial loss, customer churn, and loss of future prospects. In our study, we assess, quantify, and mitigate the cyber-attack risk generated due to the vulnerable information technology assets using our proposed Vulnerability-based Cyber-Risk Management Model (VCRMM). We leverage Protection Motivation Theory and cyber-kill chain to assess the cyber risk based on specific characteristics of vulnerabilities. We perform text mining using the topic modelling technique, Latent Dirichlet Allocation, find a correlation between the topics, and then classify the severity rating of vulnerabilities. The higher the severity rating of any vulnerability, the greater the probability of cyber-attack (p) any organization faces. Next, we quantify the cyber-attack risk in terms of expected losses. Finally, based on Rational Choice Theory and NIST-guided Vulnerability Management Process, we propose mitigation strategies to reduce, accept, or transfer the cyber-attack risk. Collapse

Semantic filters: rational choice theory

Topics: IT security threat risk management IT security Microsoft Windows Chief Information Officer

Methods: topic model decision tree classification naïve bayes machine learning experiment

Theories: rational choice theory protection motivation theory
Deepfake Valence: A Double-edged Sword

2023 | Americas Conference on Information Systems | Citations: 0
Authors: Liang, Huigang; Chew, Shao

Abstract: Deepfakes have garnered widespread attention for their malicious use. Despite i ... Expand

Abstract: Deepfakes have garnered widespread attention for their malicious use. Despite its infamy, deepfakes can bring forth a myriad of benefits. Given the controversies around deepfake, it is unclear why people adopt this technology for various purposes. Through the lens of rational choice theory, we develop a research model to explain deepfake adoption. From the perspective of deepfake developers, we categorize deepfake usage based on two dimensions: purpose (utilitarian vs. hedonic) and valence (benevolent vs. malevolent). Deepfake adoption is driven by a risk benefit analysis which, in turn, is influenced by socioenvironmental factors. Collapse

Semantic filters: rational choice theory

Topics: deepfake social norm technology adoption computer crime

Methods: SEM tool survey statistical hypothesis test scale reliability field study

Theories: rational choice theory big five model
A Taxonomy for Risk Assessment of Cyberattacks on Critical Infrastructure (TRACI)
PDF
2023 | Communications of the Association for Information Systems | Citations: 0
Authors: Plachkinova, Miloslava; Vо, Ace

Abstract: Cybercrime against critical infrastructures such as nuclear reactors, power pla ... Expand

Abstract: Cybercrime against critical infrastructures such as nuclear reactors, power plants, and dams has been increasing in frequency and severity. Recent literature regarding these types of attacks has been extensive but due to the sensitive nature of this field, there is very little empirical data. We address these issues by integrating Routine Activity Theory and Rational Choice Theory, and we create a classification tool called TRACI (Taxonomy for Risk Assessment of Cyberattacks on Critical Infrastructure). We take a Design Science Research approach to develop, evaluate, and refine the proposed artifact. We use mixed methods to demonstrate that our taxonomy can successfully capture the characteristics of various cyberattacks against critical infrastructure. TRACI consists of three dimensions, and each dimension contains its own subdimensions. The first dimension comprises hacker motivation, which can be financial, socio-cultural, thrill-seeking, and/or economic. The second dimension represents the assets such as cyber, physical, and/or cyber-physical components. The third dimension is related to threats, vulnerabilities, and controls that are fundamental to establishing and maintaining an information security posture and overall cyber resilience. Our work is among the first to utilize criminological theories and Design Science to create an empirically validated artifact for improving critical infrastructure risk management. Collapse

Semantic filters: rational choice theory

Topics: IT security risk management usability data security strategic management

Methods: qualitative interview survey design science personal interview design artifact

Theories: rational choice theory activity theory information systems theory utility theory
Adoption of enterprise mobile systems – An alternative theoretical perspective
PDF
2022 | International Journal of Information Management | Citations: 0
Authors: Choudhary, Praveen K.; Routray, Susmi; Upadhyay, Parijat; Pani, A.K.

Abstract: Enterprises nudge the usage of mobile devices to ensure business continuity, alt ... Expand

Abstract: Enterprises nudge the usage of mobile devices to ensure business continuity, although this tends to amplify corporate security risks. Consequently, corporations adopt Enterprise Mobile Systems (EMS) to facilitate em ployees working from home, ensuring security and privacy. Notwithstanding the business benefits of EMS, the adoption rate of these solutions by employees is significantly low. Traditional theories on technology adoption do not explain why some employees choose to use EMS through their mobile devices to access official applications, while others refrain. This study uses construal level theory and rational choice theory to examine the role of use contexts and intention to comply with EMS policy on employees’ decision to adopt EMS. A combination of qualitative and quantitative methods was applied. A mixed approach was followed for this study and analysis was done based on country-wide cross-sectional survey of 330 professionals engaged with reputed information technology companies. The results highlight that employees’ use contexts and intentions to comply with the EMS policy are strong antecedents of adapting to new systems. The results also reinforce that policy awareness positively affects the intention to comply with EMS policies, impacting employee engagement and task performance. Collapse

Semantic filters: rational choice theory

Topics: mobile system task productivity data security privacy IT policy

Methods: qualitative interview mixed method survey partial least squares path modeling data transformation

Theories: construal level theory rational choice theory
The interaction of dark traits with the perceptions of apprehension
PDF
2022 | HICSS | Citations: 0
Authors: Gaia, Joana; Murray, David; Sanders, George; Sanders, Sean; Upadhyaya, Shambhu; Wang, Xunyi; Yoo, Chul

Abstract: This paper integrates dark personality traits with the economics of crime and ra ... Expand

Abstract: This paper integrates dark personality traits with the economics of crime and rational choice theories to identify the role that the Dark Triad and thrill-seeking have on the perceptions of being caught engaging in violating privacy laws. Collapse

Semantic filters: rational choice theory

Topics: criminality Health Insurance Portability and Accountability Act personality information privacy law computer crime

Methods: survey partial least squares regression PLS tool

Theories: rational choice theory
Guest editorial: Re-imagining diffusion and adoption of emerging technologies
PDF
2022 | International Journal of Information Management | Citations: 0
Authors: Sharma, Sujeet Kumar; De, Rahul; Jeyaraj, Anand; Raman, Ramakrishnan

Abstract: ... Expand

Abstract: Collapse

Semantic filters: rational choice theory

Topics: artificial intelligence word of mouth social presence

Methods: theoretical contribution mixed method literature sample partial least squares path modeling

Theories: work systems theory construal level theory rational choice theory
Protecting Organizational Information Assets: Exploring the Influence of Regulatory Focus on Rational Choices
PDF
2021 | HICSS | Citations: 0
Authors: Burns, Aj

Abstract: Protecting organizational information assets is an essential objective for most ... Expand

Abstract: Protecting organizational information assets is an essential objective for most organizations. More than ever, information security relies on insiders with access to information in their work. This research integrates regulatory focus theory with rational choice theory to help shed light on these insiders’ motivations to protect organizational information. The result of these exploratory analyses indicates that promotion and prevention foci each distinctly relate to perceived costs and benefits of protecting organizational information assets. Additionally, the findings show that the overall benefit of protecting mediates an expanded set of costs and benefits. Ultimately, the model explains 57.1% of the variance in insiders’ intentions to protect organizational information assets. Collapse

Semantic filters: rational choice theory

Topics: data security information security practice IT security cybersecurity behavior anonymity

Methods: PLS tool partial least squares regression mediation analysis self reported survey theoretical contribution

Theories: regulatory focus theory rational choice theory
Investigating the Impact of Organizational Culture on Information Security Policy Compliance: The Case of Ethiopia.

2021 | Americas Conference on Information Systems | Citations: 0
Authors: Ejigu, Kibrom; Siponen, Mikko; Arage, Tilahun

Abstract: Information security is one of the organizations' top agendas worldwide. Simila ... Expand

Abstract: Information security is one of the organizations' top agendas worldwide. Similarly, there is a growing trend in the kinds and rate of security breaches. Information security experts and scholars concentrate on outsiders' threats; conversely, insiders are responsible for most of the security breaches in organizations. Further, the majority of information security research findings are limited to solutions that are technically focused. However, it is now recognized that the technological approach alone does not carry the security level needed. So this led researchers to embark on socio-technical approaches. Thus, this study explores organizational culture's effect on employees' intention to comply with information security policies (ISP). A rational choice theory and a computing value framework construct are used to build and evaluate an empirical ISP compliance model. A survey method used to collect data from Ethiopia. Collapse

Semantic filters: rational choice theory

Topics: organizational culture data security national culture security policy

Methods: structural equation modeling survey SEM tool qualitative interview

Theories: rational choice theory
What drives consumers to adopt a sharing platform: An integrated model of value-based and transaction cost theories
PDF
2021 | Information & Management | Citations: 0
Authors: Liang, Ting-Peng; Lin, Yi-Ling; Hou, Hsiao-Chi

Abstract: The sharing economy has become a source of innovation in recent years. However, ... Expand

Abstract: The sharing economy has become a source of innovation in recent years. However, some sharing business models succeed while others fail. A research model combining transaction costs and value-based models is developed and empirically evaluated using 476 responses. The results indicate that transaction costs and perceived benefits affect perceived value, which affects the intention to use the platform. The sharing object moderates the effect between transaction costs and perceived value. The effects of location and brand asset specificity on transaction costs vary across different sharing objects. Our findings explain why certain products are more likely to be successful on sharing platforms. Collapse

Semantic filters: rational choice theory

Topics: sharing platform asset specificity usage intention website decision making

Methods: experiment survey parametric test Student's t-test partial least squares regression

Theories: transaction cost economics unified theory of acceptance and use of technology technology acceptance model cognitive evaluation theory rational choice theory
Bitcoin investment: a mixed methods study of investment motivations
PDF
2021 | European Journal of Information Systems | Citations: 11
Authors: Mattke, Jens; Maier, Christian; Reis, Lea; Weitzel, Tim

Abstract: Bitcoin is a well-established blockchain-based cryptocurrency that has attracted ... Expand

Abstract: Bitcoin is a well-established blockchain-based cryptocurrency that has attracted a great deal of attention from media and regulators alike. While millions of individuals invest in bitcoin, their motivations for doing so are less clear than with traditional investment decisions. We argue that the technical nature of bitcoin investments gives it unique characteristics and, consequently, that we lack a thorough understanding of how this affects the motivations behind bitcoin investment. We use a mixed method approach consisting of qualitative (n = 73) and quantitative (n = 150) studies and fuzzy-set qualitative comparative analysis (fsQCA) to identify seven bitcoin-specific motivations (profit expectancy, ease of bitcoin acquisition, support of bitcoin ideology, investment skills, risk affinity, anticipated and experienced inaction regret) and how configurations of them explain bitcoin investment. The findings reveal, among others, that some individuals invest in bitcoin because they support the bitcoin ideology. Contrary to the traditional investment literature, profit expectancy is not a necessary condition to the extent that there is one empirical configuration of motivations that explains that individuals also invest in bitcoin even if they do not expect profits. The results disclose non-trivial investment motivation configurations and lay the groundwork for future studies of the role of cryptocurrencies in society. Collapse

Semantic filters: rational choice theory

Topics: Bitcoin crowdsourcing crowdfunding blockchain cryptocurrency

Methods: qualitative interview mixed method survey triangulation design artifact

Theories: regret theory fuzzy set theory theory of abduction set theory rational choice theory

Page 1 of 8 Next

AIS11

Journals

Conferences

Semantic Filter

Found 72 articles

Vulnerability-based Cyber-Risk Management: A Text-mining Approach

Deepfake Valence: A Double-edged Sword

A Taxonomy for Risk Assessment of Cyberattacks on Critical Infrastructure (TRACI)

Adoption of enterprise mobile systems – An alternative theoretical perspective

The interaction of dark traits with the perceptions of apprehension

Guest editorial: Re-imagining diffusion and adoption of emerging technologies

Protecting Organizational Information Assets: Exploring the Influence of Regulatory Focus on Rational Choices

Investigating the Impact of Organizational Culture on Information Security Policy Compliance: The Case of Ethiopia.

What drives consumers to adopt a sharing platform: An integrated model of value-based and transaction cost theories

Bitcoin investment: a mixed methods study of investment motivations