THREE ESSAYS ON THE ECONOMICS OF INFORMATION SECURITY