Title: The cyber security spending paradox: unravelling the enigma of escalating threats in the face of increased investment in the USA (2010-2023)
Authors: Esra Merve Boztosun Çalışkan
Addresses: Humanities and Social Science Faculty, Political Science and International Relations Department, Istanbul Medipol University, 34815, Istanbul
Abstract: This study examines the paradoxical relationship between increasing United States of America (USA) cybersecurity investment and rising cyberattacks from 2010-2023. Despite over $20 billion in cybersecurity spending, attack frequency and complexity continue escalating. Through mixed-methods analysis utilising comprehensive statistical techniques, including time-series decomposition, correlation analysis, and regression modeling with gross domestic product (GDP), internet usage, and technological advancement controls, this research reveals that traditional reactive spending strategies, asymmetric offence-defence dynamics, and inadequate measurement frameworks better explain this paradox than simple investment ineffectiveness. Using official data from Cybersecurity and Infrastructure Security Agency (CISA), FBI IC3 (Federal Bureau of Investigation Internet Crime Complaint Center), and National Institute of Standards and Technology (NIST), the analysis demonstrates that spending-security relationships are more complex than previously understood. Traditional security models prove insufficient against current threats. The study advocates for fundamental policy shifts toward adaptive, intelligence-driven approaches prioritising proactive defence, cross-sector coordination, and dynamic resource allocation, urging radical cybersecurity strategy reassessment.
Keywords: cyber security; policy making; security budget; national security; USA.
DOI: 10.1504/IJTPM.2026.152564
International Journal of Technology, Policy and Management, 2026 Vol.26 No.1, pp.88 - 113
Received: 26 Dec 2024
Accepted: 08 Jul 2025
Published online: 27 Mar 2026 *