Exploring the social implications of buying and selling cyber security

AbstractGovernments, businesses, private citizens and even organised crime are increasingly investing in cyber security, with the cyber security industry growing in size and relevance. This paper demonstrates that markets for the buying and selling of cyber security should be subject to many of the same critical inquiries typically targeted at the private security industry. Using a number of illustrative examples of emerging trends in the commodification of cyber security it will be highlighted how these markets create significant social impacts and present similar dilemmas of democracy, justice, sovereignty, and deleterious side-effects for wider society. Key conceptual differences between cyber security commodities and ‘conventional’ security commodities will also be considered before arguing for an inter-disciplinary research agenda into the considerable social implications of the buying and selling of cyber security commodities.