Ross Anderson and Tyler Moore have published their survey paper on "The Economics of Information Security: A Survey and Open Questions".
Read the full version of the paper, and the shorter version of the paper, which appeared in Science Magazine.
Their presentation at The Economics of the Software and Internet Industries conference in Toulouse, France, 19-20 January 2007, can be found here.