In this paper, we examine how software vulnerabilities affect firms that license software and consumers that purchase software. In particular, we model three decisions of the firm: (i) an upfront investment in the quality of the software to reduce potential vulnerabilities; (ii) a policy...

Software security is a major concern for vendors, consumers, and regulators since attackers that exploit vulnerabilities can cause substantial damages. When vulnerabilities are discovered after the software has been sold to consumers, the firms face a dilemma. A policy of disclosing...

A model of dynamic R&D behavior is presented in which participants in the race have imperfect information about the (true) "hazard rate" of the R&D process. In this model, a firm will be ambivalent about a rival firm's success at an intermediate stage. On the one hand, the probability of winning...