Purpose – This paper aims to challenge the assumption that the theory of planned behaviour (TPB) includes all constructs that explain information security policy compliance and investigates if anticipated regret or constructs from the protection motivation theory add explanatory power. The TPB...

Purpose – The purpose of this paper is to test the practical utility of attack graph analysis. Attack graphs have been proposed as a viable solution to many problems in computer network security management. After individual vulnerabilities are identified with a vulnerability scanner, an attack...

Purpose It is often argued that the increased automation and availability of offensive cyber tools has decreased the skill and knowledge required by attackers. Some say that all it takes to succeed with an attack is to follow some instructions and push some buttons. This paper aims to tests this...

This paper utilizes a Swedish alcohol policy experiment conducted in the late 1960s to identify the impact of prenatal alcohol exposure on educational attainments and labor market outcomes. The experiment started in November 1967 and was prematurely discontinued in July 1968 due to a sharp...

We provide a framework for setting congestion charges that reflect emission and congestion externalities and policy responses, such as vehicle ownership, driving, and residential sorting. Using Swedish administrative microdata, we identify these responses by exploiting a temporary exemption for...

We utilize a large-scale randomized social experiment to identify how coworkers affect each other's effort as measured by work absence. The experiment altered the work absence incentives for half of all employees living in Göteborg, Sweden. Using administrative data we are able to recover the...