A Rational Choice Model of Computer and
Network Crime
Chris Westland
International Journal of Electronic Commerce
Volume 1, Number 2, Winter 1996-97, pp. 109-126.
Abstract: Computer and network security are too often couched in
terms of passwords and encryption_the computer equivalent of "lock and key"
safekeeping for physical assets. Even though the sophistication of
password-encryption schemes has improved dramatically, with new standards
for secure Internet transfer of digital cash and card numbers, passwords
still provide incomplete and flawed protection. Following the lead of law
enforcement in traditional crimes, which has moved beyond "locks" to
address the entire life cycle of crime, this research assesses how computer
security can take what has been learned about effective crime prevention to
move beyond passwords. It proposes a "rational choice" model of computer
and network crime that identifies new points to be targeted for control.
This broader perspective is used to define an expanded control agenda to
fight computer and network crime.
Key Words and Phrases: access security, computer crime,
information system controls, Internet security, law enforcement.