Cybercrime Deterrence and International Legislation: Evidence from Distributed Denial of Service Attacks

Authors

Kai-Lung Hui, Hong Kong University of Science and TechnologyFollow
Seung Hyun Kim, Yonsei UniversityFollow
Qiu-Hong Wang, Singapore Management UniversityFollow

Abstract

In this paper, we estimate the impact of enforcing the Convention on Cybercrime (COC) on deterring distributed denial of service (DDOS) attacks. Our data set comprises a sample of real, random spoof-source DDOS attacks recorded in 106 countries in 177 days in the period 2004–2008. We find that enforcing the COC decreases DDOS attacks by at least 11.8 percent, but a similar deterrence effect does not exist if the enforcing countries make a reservation on international cooperation. We also find evidence of network and displacement effects in COC enforcement. Our findings imply attackers in cyberspace are rational, motivated by economic incentives, and strategic in choosing attack targets. We draw related implications.

Recommended Citation

Hui, Kai-Lung; Kim, Seung Hyun; and Wang, Qiu-Hong. 2017. "Cybercrime Deterrence and International Legislation: Evidence from Distributed Denial of Service Attacks," MIS Quarterly, (41: 2) pp.497-523.