We develop a theoretical model of security investments in a network of interconnected agents. Network connections introduce the possibility of cascading failures, due to an exogenous or endogenous attack, depending on the profile of security investments by the agents. The general presumption in...