Research Note—Patching the Cloud: The Impact of SaaS on Patching Strategy and the Timing of Software Release

Vidyanand Choudhary () and Zhe (James) Zhang ()
Additional contact information
Vidyanand Choudhary: Paul Merage School of Business, University of California Irvine, Irvine, California 92697
Zhe (James) Zhang: Naveen Jindal School of Management, University of Texas at Dallas, Richardson, Texas 75080

Information Systems Research, 2015, vol. 26, issue 4, 845-858

Abstract: This paper extends prior research on the software vendors’ optimal release time and patching strategy in the context of cloud computing and software as a service (SaaS). Traditionally, users are responsible for running on-premises software; by contrast, a vendor is responsible for running SaaS software, and the SaaS vendor incurs a larger proportion of defect-related costs than a vendor of on-premises software. We examine the effect of this difference on a vendor’s choice of when to release software and the proportion of software defects to fix. Surprisingly, we find that, despite incurring a larger proportion of defect-related costs, it is optimal for the SaaS vendor to release software earlier and with more defects, and to patch a smaller proportion of defects, than the on-premises software vendor. Even though the SaaS vendor incurs higher defect-related costs, he obtains a larger profit than the traditional vendor. In addition, we find that for a vendor who uses the SaaS model, the optimal number of defects after patching may be lower than the socially efficient outcome. This occurs despite the fact that the number of defects after patching in the SaaS model is higher than in the traditional on-premises model.

Keywords: software security; cloud; software as a service; patch management; software release time; software maintenance; defect-related costs; economics of information systems; monopoly (search for similar items in EconPapers)
Date: 2015
References: View references in EconPapers View complete reference list from CitEc
Citations: View citations in EconPapers (2)

Downloads: (external link)
http://dx.doi.org/10.1287/isre.2015.0601 (application/pdf)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:inm:orisre:v:26:y:2015:i:4:p:845-858

Access Statistics for this article

More articles in Information Systems Research from INFORMS Contact information at EDIRC.
Bibliographic data for series maintained by Chris Asher ().