Why a counterfeit risk avoidance strategy fails

Miyamoto, Inez; Holzer, Thomas H.; Sarkani, Shahram

doi:10.1016/j.cose.2016.12.015

Cited by 6 publications

(2 citation statements)

References 39 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The cyber security strategy had influence on Cybersecurity Investment (Barney, 1986;Miyamoto et al, 2017) H4: Financial consideration had influences on Cybersecurity Investment (Gordon & Loeb, 2002;Gordon et al, 2020;Jensen & Meckling, 1976) H5:…”

Section: H1mentioning

confidence: 99%

Influential factors of cybersecurity investment: A quantitative SEM analysis

Rattanapong,

Ayuthaya

2025

10.5267/j.msl

View full text Add to dashboard Cite

In the dynamic landscape of digital enterprises, cybersecurity has emerged as a critical determinant of organizational effectiveness. This study delves into the intricate realm of cybersecurity investment within ASEAN organizations, exploring the key facets that drive decision-making in this domain. Using a quantitative approach through structural equation modeling (SEM), we conducted an in-depth analysis based on a sample of 419 enterprises meeting cybersecurity criteria. Our findings reveal that cybersecurity strategy, financial considerations, and institutional and regulatory conditions are the primary factors influencing cybersecurity investments in the ASEAN region. In particular, financial resources emerged as the most critical determinant, underscoring the importance of adequate funding to address evolving cyber threats. Furthermore, our study highlights the crucial role of institutional and regulatory frameworks in shaping investment behavior, indicating a heightened awareness among firms regarding compliance with legal requirements. By unpacking these dynamics, our research provides deep insights into the intricate interplay of factors shaping cybersecurity investments in ASEAN organizations. This study contributes to the discourse by emphasizing the imperative nature of understanding the impact of risk aversion, organizational structures, and long-term practices on cybersecurity resilience. The implications of our findings extend to policy making, innovation, and future research directions in the cybersecurity domain, offering valuable insights to improve cybersecurity preparedness and resilience against evolving cyber threats.

show abstract

Section: H1mentioning

confidence: 99%

Influential factors of cybersecurity investment: A quantitative SEM analysis

Rattanapong,

Ayuthaya

2025

10.5267/j.msl

View full text Add to dashboard Cite

show abstract

“…Unfortunately, vendors are not always able to oversee all parts of the supply chain [38,60]. The constant reduction in transistor size makes IC fabrication an expensive process, and IC designers often outsource the fabrication task to overseas foundries to reduce their costs [35,46,99].…”

Section: Introductionmentioning

confidence: 99%

A Touch of Evil: High-Assurance Cryptographic Hardware from Untrusted Components

Mavroudis¹,

Cerulli²,

Švenda³

et al. 2017

Preprint

View full text Add to dashboard Cite

The semiconductor industry is fully globalized and integrated circuits (ICs) are commonly defined, designed and fabricated in different premises across the world. This reduces production costs, but also exposes ICs to supply chain attacks, where insiders introduce malicious circuitry into the final products. Additionally, despite extensive post-fabrication testing, it is not uncommon for ICs with subtle fabrication errors to make it into production systems. While many systems may be able to tolerate a few byzantine components, this is not the case for cryptographic hardware, storing and computing on confidential data. For this reason, many error and backdoor detection techniques have been proposed over the years. So far all attempts have been either quickly circumvented, or come with unrealistically high manufacturing costs and complexity.This paper proposes Myst, a practical high-assurance architecture, that uses commercial off-the-shelf (COTS) hardware, and provides strong security guarantees, even in the presence of multiple malicious or faulty components. The key idea is to combine protective-redundancy with modern threshold cryptographic techniques to build a system tolerant to hardware trojans and errors. To evaluate our design, we build a Hardware Security Module that provides the highest level of assurance possible with COTS components. Specifically, we employ more than a hundred COTS secure cryptocoprocessors, verified to FIPS140-2 Level 4 tamper-resistance standards, and use them to realize high-confidentiality random number generation, key derivation, public key decryption and signing. Our experiments show a reasonable computational overhead (less than 1% for both Decryption and Signing) and an exponential increase in backdoor-tolerance as more ICs are added.

show abstract