The Economics of Information Security: A Survey and Open Questions http://www.cl.cam.ac.uk/~rja14/Papers/toulouse-summary.pdf -