Cybercrime deterrence and international legislation: Evidence from distributed denial of service attacks

• Main Authors: HUI, Kai-Lung, KIM, Seung Hyun, WANG, Qiu-Hong
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2017
• Subjects: Cybercrime; deterrence; legislation; law enforcement; convention on cybercrime; distributed denial of service attack; Computer Sciences; Information Security; Internet Law
• Online Access: https://ink.library.smu.edu.sg/sis_research/3420; https://ink.library.smu.edu.sg/context/sis_research/article/4421/viewcontent/Cybercrime_Deterrence.pdf
• Institution: Singapore Management University

In this paper, we estimate the impact of enforcing the Convention on Cybercrime (COC) on deterring distributed denial of service (DDOS) attacks. Our data set comprises a sample of real, random spoof-source DDOS attacks recorded in 106 countries in 177 days in the period 2004-2008. We find that enforcing the COC decreases DDOS attacks by at least 11.8 percent, but a similar deterrence effect does not exist if the enforcing countries make a reservation on international cooperation. We also find evidence of network and displacement effects in COC enforcement. Our findings imply attackers in cyberspace are rational, motivated by economic incentives, and strategic in choosing attack targets. We draw related implications.