LU konference
THE LIGHT AND SHADOW OF CYBERSECURITY REGULATION: A NATURAL EXPERIMENT IN CHINA
A drastic rise in security incidents is urging policy makers to introduce cybersecurity regulations, but the efficacy is often questioned. We address this question by analyzing two sets of security policies in China on the basis of a panel of cyberattack traffic data drawn from the DShield distributed intrusion detection system for 201 countries and covering a period of 11 years. We find that mandatory installation of content filtering software in public computers and enforcing an incident detection and reporting process in online business can reduce cyberattack rate by 20.97% and 52.17% on average. Our results reveal the deficiencies and mutually opposing effects associated with the policies.
Speaker Bio:
Kai-Lung Hui is a professor in the Department of Information Systems, Business Statistics, and Operations Management at the Hong Kong University of Science and Technology. His research interests include information privacy and security, information technology policies, and electronic commerce. His research has been published in scholarly journals including Management Science, Information Systems Research, MIS Quarterly, and Journal of MIS, among others. He has served on the editorial boards of various journals and conferences, and is currently a senior editor of Information Systems Research.
Dr. Hui has provided consulting services to various government and non-government organizations, including the Intellectual Property Department of the Hong Kong SAR Government, the World Intellectual Property Organization (WIPO), and the Ministry of Law of Singapore. He has taught courses in business strategy, privacy and security management, and technology management, among others. He obtained his BBA and PhD degrees from the Hong Kong University of Science and Technology.