Welcome Address: Improving Incentives for Cybersecurity
summary
Argues that failures stem from incentives not just design and demonstrates this with large-scale incident and vulnerability data, DNS/AS-level infection maps and provider-level measurements. Describes a centralized clearinghouse and a hosting benchmark covering ~40,000 providers, plus naming-and-shaming and police referrals. Shows that a small fraction of providers host the majority of malware so targeted cleanup yields big drops in infections, that public rankings force remediation, and that liability and market-pressure interventions can change behavior.
AI-written summary · about
chapters (7)
- 0:00Welcome and introduction
- 2:22Cybersecurity incentives discussion
- 6:38Incentive problems in software security
- 10:12Public naming and shaming approach
- 13:25Security benchmarking initiatives
- 15:54Liability and legal frameworks
- 17:18Closing remarks and Q&A
related talks
01h 09mKeynote: What Do We Owe One Another In Cybersecurity?
41mKeynote: Fireside Chat with U.S. National Cyber Director Chris Inglis
22mDiscussion - White Hat Hacking, Session 7
55mKeynote - The Future of Cybersecurity Needs You, Here is Why.
51mThe State(s) of Cyber Incentives: Creative Laws Driving Better Security
46mNational Cyber-Aggression and Private-Sector Internet Infrastructure
21mhow to reconcile high-performance hosting and innovation projects with IT security
41mThe Divine and Felonious Nature of Cyber Security