An Analytical Approach to the Adoption of Asymmetric Bidirectional Firewalls: Need for Regulation?

TL;DR

This paper develops an analytical framework to understand the adoption of asymmetric bidirectional firewalls, highlighting the influence of free-riding, shortsightedness, and technological asymmetries on cybersecurity policy and social welfare.

Contribution

It introduces a novel analytical model that incorporates technological asymmetries and behavioral issues affecting firewall adoption and evaluates policy implications.

Findings

Equilibrium adoption levels are affected by asymmetries and behavioral biases.

Policy measures can improve social welfare and cybersecurity effectiveness.

Analysis of price of anarchy and shortsightedness impacts on network security.

Abstract

Recent incidents of cybersecurity violations have revealed the importance of having firewalls and other intrusion detection systems to monitor traffic entering and leaving access networks. But the adoption of such security measures is often stymied by `free-riding' effects and `shortsightedness' among Internet service providers (ISPs). In this work, we develop an analytical framework that not only accounts for these issues but also incorporates technological factors, like asymmetries in the performance of bidirectional firewalls. Results on the equilibrium adoption and stability are presented, along with detailed analysis on several policy issues related to social welfare, price of anarchy, and price of shortsightedness.