Dynamics of Shared Security in the Cloud

Nan Clement () and Daniel Arce ()
Additional contact information
Nan Clement: Sloan School of Management, Massachusetts Institute of Technology, Cambridge, Massachusetts 02142
Daniel Arce: School of Economic, Political, and Policy Sciences, University of Texas at Dallas, Richardson, Texas 75080

Information Systems Research, 2025, vol. 36, issue 2, 916-943

Abstract: Cloud services exist under a shared security environment with a dynamic nature; users trade fixed costs for variable costs over time, and both cloud services providers (CSPs) and users contribute to overall security. We investigate the nature of shared security in a dynamic game where users’ security contributions and cloud usage figure into their CSP’s vulnerability. Furthermore, CSPs’ own security contribution takes into account both their users as well as competition with other CSPs. The Markov perfect equilibrium reveals the long-term time patterns of security of the cloud. In particular, we identify a novel form of time-path strategic complementary between usage and a CSP’s Markov state of security. This implies that cloud security is an unusual form of impure public good, whereby individual contributions bolstering a CSP’s security endow a selective incentive (private benefit) on others rather than on the contributor alone. Because this increases usage, CSP vulnerability increases over time. At the same time, CSP competition on security may lead to both welfare improvements for users and lock-in.

Keywords: cloud security; cloud competition; cybersecurity; information security; shared security; joint responsibility; lock-in; Markov perfect equilibrium; selective incentives (search for similar items in EconPapers)
Date: 2025
References: Add references at CitEc
Citations:

Downloads: (external link)
http://dx.doi.org/10.1287/isre.2023.0256 (application/pdf)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:inm:orisre:v:36:y:2025:i:2:p:916-943

Access Statistics for this article

More articles in Information Systems Research from INFORMS Contact information at EDIRC.
Bibliographic data for series maintained by Chris Asher ().