Site Sponsor:

mcafee_logo.gif
line

Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

« Yet Another Spam Type Coming Your Way | Main | Automatic Application Vulnerability Assessment »

Demise of DRM, Economics of File Sharing and Persistent Security Risks

Digital Rights Management (DRM) may be fading as Universal Records joins EMI in testing the DRM-free music downloads. According to MP3.com:

The world's largest music company--home to the likes of U2, 50 Cent, and Eminem--is set to begin testing sales of DRM-free downloads, a move that signals a continuing shift in the major record labels' antipiracy strategy in the face of anemic CD sales.

But if record companies think illegal file sharing is the problem with their sales, they'd better take a look at a study entitled The Effect of File Sharing on Record Sales: An Empirical Analysis which doesn't support the idea that file sharing is eating into profits.

The authors of the paper cryptically explain their methods:

We match an extensive sample of downloads to U.S. sales data for a large number of albums. To establish causality, we instrument for downloads using data on international school holidays. Downloads have an effect on sales that is statistically indistinguishable from zero. Our estimates are inconsistent with claims that file sharing is the primary reason for the decline in music sales during our study period.

Translation: people who illegally copy music wouldn't buy it anyway so don't count them as lost sales.

So where are we now? Record companies have started to throw in the towel on DRM and if Universal dumps DRM completely it is likely others will follow. File sharing will continue because it seems that it's done independently of what the record companies do anyway. What may change is attitudes about file sharing and P2P clients.

Here is a possible scenario:

1. Record companies dump DRM completely.
2. More customers assume it's OK to share music files, after all they aren't prevented from sharing
3. The number of P2P file sharing clients grows
4. Too few users keep their clients patched and organizations don't manage P2P on their networks as they should.
5. P2P becomes an even more viable option for malware distribution than it is today
6. Creative attackers start to use P2P as an infrastructure for botnet and other rogue applications, kind of like the current rush to build Facebook applications.

For every silver lining, there seems to be a cloud.

TrackBack

TrackBack URL for this entry:
http://www.realtime-websecurity.com/type/mt-tb.cgi/378

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Dan Sullivan's Bio:

Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net