<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: valuation]]></title>
    <link>http://securityratty.com/tag/valuation</link>
    <description></description>
    <pubDate>Fri, 21 Jul 2006 00:38:00 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[So Logically, If She Weighs The Same As A DuckShes A Witch!]]></title>
      <link>http://securityratty.com/article/3fa3a2c5641e284f4fc5fc76430d2faa</link>
      <guid>http://securityratty.com/article/3fa3a2c5641e284f4fc5fc76430d2faa</guid>
      <description><![CDATA[I usually try to stay far away from politics and current events, but my friend Rich has put up a blog post blaming the credit crisis on quantitative analysis, and then positing that because the...]]></description>
      <content:encoded><![CDATA[<p>I usually try to stay far away from politics and current events, but my friend <strong><a href="http://securosis.com/2008/09/17/the-fallacy-of-complete-and-accurate-risk-quantification/">Rich has put up a blog post</a></strong> blaming the credit crisis on quantitative analysis, and then positing that because the economy sucks, Information Security should be only qualitative.</p>
<p>Now I&#8217;ve been &#8220;accused&#8221; of being a quant in the past (hi rybolov!) but in reality the only dogs I have in this fight are the model and the application of scientific method - and really, ethically speaking, I have to be tied to the latter while applying the former.</p>
<p>And I see a false dichotomy in this whole Quant vs. Qual thing.  We, as a profession, tend to create a political divide between the two which, if it even exists, I&#8217;d say is based more on our ignorance rather than our expertise.  After all, we are the profession that regularly multiplies across ordinal scales and uses wonderful models like R=VxTxI.   As someone  learning to deal in probabilities and rationalism, I have to recognize that this discussion is really just about the act of observation using different metrics of measurement.</p>
<p>But how we&#8217;re going about observing does not change the fact that there is measurement based on observation.  So if I&#8217;m working with you I can easily turn your qualitative scale into a quantitative one, and vice-versa.  Yes, Shrdlu, if we had the time, even your most seemingly Qual things could be Quant! (This flexible world view, btw, is an outcome of that new-fangled Bayesian thing).</p>
<p><strong>COGNITIVE BIAS A-PLENTY</strong></p>
<p>But back to what Rich is saying there about information security and risk - and he isn&#8217;t/won&#8217;t be the only one saying these sorts of things - we should try to understand what&#8217;s really going on rather than get caught up in the emotional hurricane.  Our profession suffers several forms of cognitive bias.  The nature of our jobs and what we do can cause us to be focused on the outcome and not the quality of the decision at the time it was made.  We want to bring in things from other professions that are useful, but at times we do view things outside our profession with false correlation to our own (unfortunately for those who write these sorts of articles, financial risk is <em><strong>completely different</strong></em> than operational risk).  We also have the tendency to focus on negative outcomes without acknowledging the positive outcomes (For example, I hear that Alan Greenspan&#8217;s new firm is up a couple of $billion in all this mess since he joined them, short sellers are doing quite well - must be because they have qualitative models or something <em>-grin-</em>).  The effect of these biases are compounded by the facts that proper correlation takes more work than we usually give it, and rational thought is not that easy when there&#8217;s a witch-hunt mentality.</p>
<div class="wp-caption alignnone" style="width: 257px"><a href="http://www.youtube.com/watch?v=zrzMhU_4m-g"><img src="http://www.riskmanagementinsight.com/media/images/weblog/peasants.png" alt="Burn her anyway!" width="247" height="219" /></a><p class="wp-caption-text">What also floats in water? (link to Youtube)</p></div>
<p><strong>WHAT SHOULD WE BE THINKING ABOUT?</strong></p>
<p>So as you and I read opinions that seem to be the polar opposite of irrational exuberance (and there will be plenty between now and the election) we&#8217;ll have to ask ourselves, &#8220;what really failed here?&#8221;  At the risk (pun) of over-simplification:</p>
<ul>
<li>Was There an Error on the part of Probability Theory?</li>
</ul>
<p>After all, Probability Science like all other fields of knowledge is always &#8220;advancing&#8221; as they say.  So perhaps probability theory is wrong somehow?</p>
<p>I&#8217;m personally disinclined to put the blame here, primarily because I would think that there would be evidence from other fields (like Quantum Mechanics) that something is amiss waaaaay before it hit a field like economics.</p>
<ul>
<li>Was There Error In The Model Used to Determine Risk?</li>
</ul>
<p>Some people who understand real estate valuation and complex derivatives and financial risk want to put the blame here.  It&#8217;s a little too early to tell, but one thing is for sure - Financial risk is so different from operational risk I couldn&#8217;t begin to hazard an opinion on the subject.   But it would seem that this is really somewhere we might look.</p>
<ul>
<li>Was There Error In The  Scale Used (Quantitative vs. Qualitative)?</li>
</ul>
<p>Honestly?  I find it extremely difficult to understand how this could be the source of financial ruin.</p>
<ul>
<li>Was There Error on the part of the Decision Maker?</li>
</ul>
<p>What if all of the above were just fine, and the decision maker chose short term gain over long term stability?  What if this was (to simplify the matter greatly) a choice of &#8220;heads&#8221; over &#8220;tails&#8221; and the coin landed on tails?  What if the model represented the right risk (probability of negative outcome vs. positive outcome), but the complex derivative was sold to someone else who had poor &#8220;risk management&#8221; (ability to make a good decisions)?</p>
<p>Now I have no clue about complex derivatives, and I&#8217;m oversimplifying to be sure - chances are like most things, there are several problems that helped create the primary cause. But it seems to me that as we go into incident response mode for the economy, it&#8217;s more helpful to do so in a rational, logical manner.<br />
<strong><br />
OTHER THINGS WE MIGHT WANT TO CONSIDER</strong></p>
<p><span style="color: #008000;"><strong>Consider the Source</strong></span><br />
Some authors (who I think tend to exploit outcome and hindsight bias,and then combine those with indirect ad hominem attacks in order to sell their books), are actually putting forth arguments against the use of analytics.  The source of this is a current epistemic debate between those who believe that only falsification is certain, and those who maintain that neither proof nor falsification are certain, there are only probabilities.    So before you go believing any &#8220;quadrants&#8221; of usefulness on faith - I encourage you to understand what is at the heart of the discussion.<br />
<span style="color: #008000;"><strong><br />
We All Have to Live In The Real World</strong></span><br />
The sun will rise tomorrow, and someone will try to find the source of the problem and do a better job.  Now chances are, they&#8217;ll be doing it in a quantitative manner.  Chances are also that at some point their models will fail and we&#8217;ll need to build new ones.  And this will happen whether the field is cosmology, economics, meteorology, information security, or professional baseball.<br />
<strong><br />
WHAT ABOUT YOU, ALEX?</strong></p>
<p>I&#8217;m far from certain and subject to change, but these days I lean towards <strong><a href="http://www.overcomingbias.com/2008/09/who-to-blame.html">Robin Hanson &amp; MIchael Lewis</a></strong> w/regards to placing blame.</p>
]]></content:encoded>
      <pubDate>Thu, 18 Sep 2008 10:59:47 +0000</pubDate>
      <category domain="http://securityratty.com/tag/risk">risk</category>
      <category domain="http://securityratty.com/tag/financial risk">financial risk</category>
      <category domain="http://securityratty.com/tag/poor risk management">poor risk management</category>
      <category domain="http://securityratty.com/tag/operational risk">operational risk</category>
      <category domain="http://securityratty.com/tag/outcome">outcome</category>
      <category domain="http://securityratty.com/tag/exploit outcome">exploit outcome</category>
      <category domain="http://securityratty.com/tag/probability">probability</category>
      <category domain="http://securityratty.com/tag/qualitative models">qualitative models</category>
      <category domain="http://securityratty.com/tag/models">models</category>
      <source url="http://riskmanagementinsight.com/riskanalysis/?p=420">So Logically, If She Weighs The Same As A DuckShes A Witch!</source>
    </item>
    <item>
      <title><![CDATA[A Commercial Web Site Defacement Tool]]></title>
      <link>http://securityratty.com/article/0f040b157439766d42ede77d14a0a6fe</link>
      <guid>http://securityratty.com/article/0f040b157439766d42ede77d14a0a6fe</guid>
      <description><![CDATA[On the look for creative approaches to cash out of selling commodity tools and services, malicious parties within the underground economy continue applying basic market approaches to further...]]></description>
      <content:encoded><![CDATA[<a href="http://bp0.blogger.com/_wICHhTiQmrA/R_ILjF281GI/AAAAAAAABhA/F4F6BLQoEyw/s1600-h/defacer1.jpg"><img id="BLOGGER_PHOTO_ID_5184218818552845410" style="margin: 0px 10px 10px 0px; float: left;" alt="" src="http://bp0.blogger.com/_wICHhTiQmrA/R_ILjF281GI/AAAAAAAABhA/F4F6BLQoEyw/s200/defacer1.jpg" border="0" /></a>On the look for creative approaches to cash out of selling commodity tools and services, malicious parties within the underground economy continue applying basic market approaches to further commercialize what was once a tax free area. <a href="http://ddanchev.blogspot.com/2007/08/commercial-click-fraud-tool.html">Commercial click fraud tools</a>, <a href="http://ddanchev.blogspot.com/2007/10/managed-spamming-appliances-future-of.html">managed spamming</a> services and <a href="http://ddanchev.blogspot.com/2007/11/managed-fast-flux-provider.html">fast-fluxing on demand</a>, <a href="http://ddanchev.blogspot.com/2007/10/botnet-on-demand-service.html">botnets and DDoS attacks</a> as <a href="http://ddanchev.blogspot.com/2008/03/loadsccs-ddos-for-hire-service.html">a service</a>, <a href="http://ddanchev.blogspot.com/2007/12/shark-malware-new-versions-coming.html">malware pitched as a remote access tool</a> with limited functionality to prompt the user to buy the full version, malware crypting as a service, and the very latest indication for this trend is the availability of commercial <a href="http://photos1.blogger.com/blogger/1933/1779/1600/dtool-1.0.png">web site defacement tools</a>.<br /><div></div><div> </div><div><br />There's a common misunderstanding regarding web site defacement tools, namely that of a defacer on purposely targeting a specific domain. That's at least the way it used to be, before defacers started embracing the efficiency model, namely deface anyone, anywhere, than parse the successful defacements logs, come across a high profile site and make sure the entire defacers community knows that they've defaced it - well at least their automated web sites defacement tools did <a href="http://ddanchev.blogspot.com/2007/07/sql-injection-through-search-engines.html">in a combination with</a> remotely included <a href="http://ddanchev.blogspot.com/2007/04/compilation-of-web-backdoors.html">web backdoors</a>.</div><br /><div><a href="http://bp3.blogger.com/_wICHhTiQmrA/R_IT91281HI/AAAAAAAABhI/H3TQz-LnVXw/s1600-h/zoneh_reporter_defacer.jpg"><img id="BLOGGER_PHOTO_ID_5184228074207368306" style="margin: 0px 10px 10px 0px; float: left;" alt="" src="http://bp3.blogger.com/_wICHhTiQmrA/R_IT91281HI/AAAAAAAABhI/H3TQz-LnVXw/s200/zoneh_reporter_defacer.jpg" border="0" /></a>This particular commercial web site defacement tool's main differentiation factor compared to others is it's efficiency centered functionability, namely it has a <a href="http://www.zone-h.org/">built-in Zone-H defacement archive submission</a>. Moreover, within the functions changelog we see :</div><br /><div></div><div>"<em>Choose number of perm folder to check it and go another site with out load all perm it cause to deface with more speed; Working back proxy and cache servers; Get Connect back with php in all servers that safe mode is Off ( with out need any command same as system() ; Auto Detect Open Command</em>"</div><div> </div><div><br />It is such kind of commercialization approaches of commodity goods that increase the market valuation of the underground economy in general, one thing for sure though - while certain parties are messing up with entry barriers making it damn easy to launch a phishing or a malware attack, others are trying to prove themselves as aspiring entrepreneurs. In the long-term, I'd rather we have defacers deface than consolidate with phishers, spammers and malware authors for the purpose of malware embedded attacks, hosting and sending of scams, a development that is slowly starting to take place despite my wishful thinking.</div><div> </div><div><strong><br />Related posts:</strong></div><div><a href="http://ddanchev.blogspot.com/2006/02/hacktivism-tensions.html">Hacktivism Tensions</a></div><div><a href="http://ddanchev.blogspot.com/2006/07/hacktivism-tensions-israel-vs.html">Hacktivism Tensions - Israel vs Palestine Cyberwars</a></div><div><a href="http://ddanchev.blogspot.com/2007/11/mass-defacement-by-turkish-hacktivists.html">Mass Defacement by Turkish Hacktivists</a></div><div><a href="http://ddanchev.blogspot.com/2007/11/overperforming-turkish-hacktivists.html">Overperforming Turkish Hacktivists</a></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=3JhlpTG"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=3JhlpTG" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=jvBR1FG"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=jvBR1FG" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=GEVnLDg"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=GEVnLDg" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=2lDIY3g"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=2lDIY3g" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=P00L5lG"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=P00L5lG" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=hnH6tNG"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=hnH6tNG" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=WMKKNjg"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=WMKKNjg" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/261895820" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 01 Apr 2008 02:25:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/malware">malware</category>
      <category domain="http://securityratty.com/tag/malware attack">malware attack</category>
      <category domain="http://securityratty.com/tag/approaches">approaches</category>
      <category domain="http://securityratty.com/tag/defacers">defacers</category>
      <category domain="http://securityratty.com/tag/creative approaches">creative approaches</category>
      <category domain="http://securityratty.com/tag/site">site</category>
      <category domain="http://securityratty.com/tag/entire defacers community">entire defacers community</category>
      <category domain="http://securityratty.com/tag/defacers deface">defacers deface</category>
      <category domain="http://securityratty.com/tag/deface">deface</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/261895820/commercial-web-site-defacement-tool.html">A Commercial Web Site Defacement Tool</source>
    </item>
    <item>
      <title><![CDATA[Losing Money When There is No Volatilty]]></title>
      <link>http://securityratty.com/article/b2d53d52e893165a4172d34270e6b473</link>
      <guid>http://securityratty.com/article/b2d53d52e893165a4172d34270e6b473</guid>
      <description><![CDATA[It is common knowledge that there is more risk when there is more volatility. But it is also possible to lose (a lot of) money in the absence of volatility as well. This case was illustrated in a...]]></description>
      <content:encoded><![CDATA[It is common knowledge that there is more risk when there is more volatility.  But it is also possible to lose (a lot of) money in the absence of volatility as well.  This case was illustrated in a recent <a href="http://www.fenews.com/fen53/one-time-articles/credit-suisse/credit-suisse.html">article</a> published by <span style="font-weight: bold;">Financial Engineering News</span>.   It was reported that <span style="font-weight: bold;">Credit Suisse</span> recently lost $120 million in Korean Derivatives -- particularly reverse convertible bonds.<br /><br />A conventional convertible bond offers lower interest rates but gives the investors an option to call a company's stock.  The bondholder is effectively the owner of the option and the issuer is the option writer.  A reverse convertible bond gives investors higher interest rates but gives the issuer the right to put shares to the investor.  In this case, the bondholder is the seller of the option and the issuer is the option buyer.   When volatility increases, option prices increase as well.  This added value stems from a higher possibility of going in-the-money.  Conversely, a decrease in volatility will lower the option value.   So if Credit Suisse was the one who "bought" the stock options via the reverse convertible structure, a decrease in volatility will decrease option value and will result into a mark-to-market loss on their end.<br /><br />Now as market makers (structurers), shouldn't Credit Suisse be hedging their exposure?  The problem with this particular structure is that the option is not based on one stock.  It issued reverse convertibles on a number of shares.  Hedging proved to be quite difficult and luck was not on their side, as stated in the article:<br /><blockquote>The problem however came in the hedging. Credit Suisse no longer had a single put option, nor did it have a portfolio of put options, since it could exercise its put into only one share. Instead it had an option on an option, a put option under which it could choose the share on which the option would be exercised. This instrument could be reasonably hedged by an appropriate portfolio of the shares provided volatility remained approximately constant, but it was effectively unhedgeable against a sharp change in volatility. If volatility in Korean shares had increased, there would be no problem; Credit Suisse’s multiple put option would be more valuable. There was, however, no effective way to hedge against a decline in volatility, which is what happened.</blockquote>The lessons that we can learn here are the following:<br /><br />1)  You can lose when there is less volatility -- particularly in options since volatility is explicitly included in valuation.<br />2)  When building a structure, one should know how to hedge it properly.<br /><br />Tags: <a href="http://technorati.com/tag/derivatives" rel="tag">derivatives</a> <a href="http://technorati.com/tag/financial+engineering" rel="tag">financial engineering</a> <a href="http://technorati.com/tag/investments" rel="tag">investments</a> <a href="http://technorati.com/tag/valuation" rel="tag">valuation</a> <a href="http://technorati.com/tag/volatility" rel="tag">volatility</a> <a href="http://technorati.com/tag/structured+products" rel="tag">structured products</a> <a href="http://technorati.com/tag/options" rel="tag">options</a>]]></content:encoded>
      <pubDate>Mon, 29 Jan 2007 06:40:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/option prices increase">option prices increase</category>
      <category domain="http://securityratty.com/tag/option">option</category>
      <category domain="http://securityratty.com/tag/option buyer">option buyer</category>
      <category domain="http://securityratty.com/tag/option writer">option writer</category>
      <category domain="http://securityratty.com/tag/investments valuation volatility">investments valuation volatility</category>
      <category domain="http://securityratty.com/tag/valuation">valuation</category>
      <category domain="http://securityratty.com/tag/volatility">volatility</category>
      <category domain="http://securityratty.com/tag/decrease option">decrease option</category>
      <category domain="http://securityratty.com/tag/volatility increases">volatility increases</category>
      <source url="http://rmquant.blogspot.com/2007/01/losing-money-when-there-is-no-volatilty.html">Losing Money When There is No Volatilty</source>
    </item>
    <item>
      <title><![CDATA[Making Risk Measures Agree with Accounting 100%]]></title>
      <link>http://securityratty.com/article/3e7957b8b886a36bd3f37d931ef12e70</link>
      <guid>http://securityratty.com/article/3e7957b8b886a36bd3f37d931ef12e70</guid>
      <description><![CDATA[In my consulting experience, there are clients that use risk software to compliment financial reporting (accounting). Instead of being used solely by the risk department, even financial controllers...]]></description>
      <content:encoded><![CDATA[In my consulting experience, there are clients that use risk software to compliment financial reporting (accounting).  Instead of being used solely by the risk department, even financial <span onclick="BLOG_clickHandler(this)" class="blsp-spelling-corrected" id="SPELLING_ERROR_0">controllers</span> use it.  This is due to the current trend of making financial reporting reflective of the <span onclick="BLOG_clickHandler(this)" class="blsp-spelling-error" id="SPELLING_ERROR_1">firm's</span> economic value based on the risks it is taking (<span onclick="BLOG_clickHandler(this)" class="blsp-spelling-error" id="SPELLING_ERROR_2">IAS</span> 39 and even Basel II).  As a consequence, they expect the results form the risk software to be consistent with accounting results to the last cent.  I guess this is the ideal state that everyone wants to achieve but is this really necessary?<br /><br />Though related, I believe that risk measurement and accounting are serving different purposes.  Risk measurement need not be exact because of the uncertainty of risk.  Because of the future-centric nature of risk measurement, generalizations and simplifications in the models are made and may not necessarily result into exact market values, etc.  In risk measurement, benchmark results are acceptable as long as they are reasonable (where you can see the degree of sensitivity to different types of risks).  So what is important in risk <span onclick="BLOG_clickHandler(this)" class="blsp-spelling-corrected" id="SPELLING_ERROR_3">measurement</span> is not the valuation of your positions to the exact cent but the model on how this value reacts with different types of risk.  Contrary to risk measurement, accounting focuses on past performance.  People tend to be very meticulous in this field to the point that they want things to be correct to the last cent.  This is because in most organizations, even in today's banks, profit and loss (past performance) is still more important.<br /><br />Nowadays, with all the innovation in software and the computing power of currently availabe hardware,  people tend to assume that risk software can double as accounting software.  But in reality, these two fields have different requirements (although they may be similar in some ways).  It is true that a software can be made flexible enough to <span onclick="BLOG_clickHandler(this)" class="blsp-spelling-corrected" id="SPELLING_ERROR_4">accommodate</span> both requirements.  Results may not be exact but good enough.  But getting values to agree with the <span onclick="BLOG_clickHandler(this)" class="blsp-spelling-corrected" id="SPELLING_ERROR_5">accounting</span> system would result into more computing time due to the increase in inputs, variables, and complexity of models.  Is the additional cost justifiable given that additional benefit is only to reconcile a few dollars and cents?  Probably not today but probably (and hopefully) in the near future when hardware specs get better while prices get cheaper.<br /><br />Tags: <a href="http://technorati.com/tag/accounting" rel="tag">accounting</a> <a href="http://technorati.com/tag/finance" rel="tag">finance</a> <a href="http://technorati.com/tag/risk+measurement" rel="tag">risk measurement</a> <a href="http://technorati.com/tag/software" rel="tag">software</a>]]></content:encoded>
      <pubDate>Tue, 26 Dec 2006 02:27:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/risk">risk</category>
      <category domain="http://securityratty.com/tag/risk software">risk software</category>
      <category domain="http://securityratty.com/tag/software">software</category>
      <category domain="http://securityratty.com/tag/risk measurement">risk measurement</category>
      <category domain="http://securityratty.com/tag/values">values</category>
      <category domain="http://securityratty.com/tag/exact market values">exact market values</category>
      <category domain="http://securityratty.com/tag/exact">exact</category>
      <category domain="http://securityratty.com/tag/exact cent">exact cent</category>
      <category domain="http://securityratty.com/tag/cent">cent</category>
      <source url="http://rmquant.blogspot.com/2006/12/do-risk-measures-need-to-be-exact.html">Making Risk Measures Agree with Accounting 100%</source>
    </item>
    <item>
      <title><![CDATA[An Option with a Negative Implied Volatility?]]></title>
      <link>http://securityratty.com/article/e3e2d77d2635093d28a03c4e180d10fc</link>
      <guid>http://securityratty.com/article/e3e2d77d2635093d28a03c4e180d10fc</guid>
      <description><![CDATA[Previously, we talked about cases when an option will have a negative value . This time, it was asked in Wilmott if there are real-life cases where options have negative implied vols

Here's my take...]]></description>
      <content:encoded><![CDATA[Previously, we talked about cases when an option will have a <a href="http://rmquant.blogspot.com/2006/07/option-with-negative-value.html">negative value</a>. This time, it was asked in <a href="http://www.wilmott.com/">Wilmott</a> if there are real-life cases where options have <a href="http://www.wilmott.com/messageview.cfm?catid=3&amp;threadid=41001">negative implied vols</a>.<br /><br />Here's my take on the subject matter:<br /><blockquote>Since implied volatilities are derived values, based on observed market parameters and a model or formula, it is indeed possible to have negative results. But does it make sense?  Intuitively, we would think that the volatility measure should only be positive and it does not make sense if negative. I think negative implied vols are a result of either a misspecification in the model, or mispricing by the market (an arbitrage opportunity, as <em>mutley</em> pointed out).</blockquote><br />Tags: <a href="http://www2.blogger.com/technorati.com/tag/finance" rel="tag">finance</a> <a href="http://www2.blogger.com/technorati.com/tag/derivatives" rel="tag">derivatives</a> <a href="http://www2.blogger.com/technorati.com/tag/options" rel="tag">options</a> <a href="http://www2.blogger.com/technorati.com/tag/valuation" rel="tag">valuation</a> <a href="http://www2.blogger.com/technorati.com/tag/volatility" rel="tag">volatility</a>]]></content:encoded>
      <pubDate>Mon, 14 Aug 2006 02:27:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/negative">negative</category>
      <category domain="http://securityratty.com/tag/negative results">negative results</category>
      <category domain="http://securityratty.com/tag/market">market</category>
      <category domain="http://securityratty.com/tag/market parameters">market parameters</category>
      <category domain="http://securityratty.com/tag/volatility measure">volatility measure</category>
      <category domain="http://securityratty.com/tag/model">model</category>
      <category domain="http://securityratty.com/tag/subject matter">subject matter</category>
      <category domain="http://securityratty.com/tag/option">option</category>
      <category domain="http://securityratty.com/tag/arbitrage opportunity">arbitrage opportunity</category>
      <source url="http://rmquant.blogspot.com/2006/08/option-with-negative-implied.html">An Option with a Negative Implied Volatility?</source>
    </item>
    <item>
      <title><![CDATA[An Option with a Negative Value?]]></title>
      <link>http://securityratty.com/article/02ce38e218900e317899e8ad702f0c48</link>
      <guid>http://securityratty.com/article/02ce38e218900e317899e8ad702f0c48</guid>
      <description><![CDATA[A recent post in the Wilmott forums asked &quot;Can an option have a negative value

Conceptually, an option with a negative value does not make sense. A negative value means that the option seller...]]></description>
      <content:encoded><![CDATA[A recent post in the Wilmott forums asked <a href="http://www.wilmott.com/messageview.cfm?catid=8&threadid=40618">"Can an option have a negative value?"</a><br /><br />Conceptually, an option with a negative value does not make sense. A negative value means that the option seller (writer) pays the option buyer. This results into a "free lunch" as described by one of the posters (waiter222). The option buyer will always win out in this case. He can exercise and make money when "in-the-money". He also has an instant gain even when the option expires worthless due to the initial cash flow. Indeed it is unfair.<br /><br />Mathematically, an option value cannot be less than zero as well. (Please correct me if I'm wrong). I've played with several scenarios using the <strong>Black-Scholes</strong> and <strong>Binomial </strong>methods and the least value of an option is zero ("worthless").<br /><br />But it is possible for an <strong>option position</strong> (note that I'm talking about an option position) to have a negative value when doing <strong>mark-to-market valuation</strong>. Marking-to-market is getting the <strong>close out (unwind) value</strong> of the position. And it can result into a loss (negative value). Here's an example, an option writer sells an option for $5. After some time, the value of an option at the same strike and expiration date rises to $6. This could mean that the option is getting more "in-the-money" and the possibility of an exercise increases. This is bad news for the option seller. The value of his position is obtained by assuming an offsetting transaction (he buys an option at $6) . The net result is -$1.<br /><br />The point that I'm getting at here is that is quite <span style="font-weight: bold;">unthinkable</span> to have negative option value. So far no one has disputed that fact. But depending on one's position (P&amp;L standpoint), the treatment of that option can be negative or positive depending on whether you treat is as an asset or liability. Does this make sense?<br /><br />Tags: <a href="http://technorati.com/tag/finance" ref="tag">finance</a> <a href="http://technorati.com/tag/derivatives" ref="tag">derivatives</a> <a href="http://technorati.com/tag/options" ref="tag">options</a> <a href="http://technorati.com/tag/valuation" ref="tag">valuation</a>]]></content:encoded>
      <pubDate>Fri, 28 Jul 2006 04:38:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/option">option</category>
      <category domain="http://securityratty.com/tag/negative option">negative option</category>
      <category domain="http://securityratty.com/tag/option seller">option seller</category>
      <category domain="http://securityratty.com/tag/option writer sells">option writer sells</category>
      <category domain="http://securityratty.com/tag/option buyer">option buyer</category>
      <category domain="http://securityratty.com/tag/option position">option position</category>
      <category domain="http://securityratty.com/tag/negative">negative</category>
      <category domain="http://securityratty.com/tag/position">position</category>
      <category domain="http://securityratty.com/tag/writer">writer</category>
      <source url="http://rmquant.blogspot.com/2006/07/option-with-negative-value.html">An Option with a Negative Value?</source>
    </item>
    <item>
      <title><![CDATA[Brushing up on my math skills...]]></title>
      <link>http://securityratty.com/article/b43b079fdc31e06bf26234490991f54e</link>
      <guid>http://securityratty.com/article/b43b079fdc31e06bf26234490991f54e</guid>
      <description><![CDATA[I'm somewhat amazed on how I got myself into the world of Financial Derivatives . I do not have a quantitative degree (I majored in Management Economics) and didn't pay much attention to my math and...]]></description>
      <content:encoded><![CDATA[I'm somewhat amazed on how I got myself into the world of <strong>Financial Derivatives</strong>. I do not have a quantitative degree (I majored in Management Economics) and didn't pay much attention to my math and statistics classes in college. Yet I find financial markets (derivatives in particular) fascinating. And becoming knowledgeable in them actually gave me an edge in the industry.<br /><br />Looking back, it seems that I chose the wrong college course. But my interest in the subject matter and the willingness to learn did not stop me from attaining my goal. Although not for quants, the <a href="http://www.cfainstitute.org/cfaprog/index.html" target="_blank"><strong>CFA program</strong></a> gave me a good background on the financial markets in general; as well as valuation methods for plain vanilla derivatives.<br /><br />I searched the net for papers. Marketing and research papers published by the big banks are of great help. Sites like <a href="http://www.defaultrisk.com/" target="_blank"><strong>DefaultRisk</strong></a> has loads of papers on Risk Management and Derivatives. But reading them is no simple feat as most of them are written by PhDs or PhD students. My lack of academic foundation in mathematics do get in the way, especially when I encounter a lot of greek symbols.<br /><br />Finding like-minded individuals to discuss topics of interests and ask for advice also did a lot of good. I am an active member of <a href="http://www.wilmott.com/" target="_blank"><strong>Wilmott</strong></a> -- an online community of quants (Username: Jomni). At first, I was the one asking questions, and now I give answers and advice myself (on topics that are not mathematically deep).<br /><br />I never stop reading. Part II of the <a href="http://prmia.org/INDEX/institute01/prm-handbook.php" target="_blank"><strong>PRMIA Professional Risk Managers' Handbook</strong></a> is a good refresher on quantitative finance topics. It covers Matrix Algebra, Differential and Integral Calculus, Probability, and Statistics. Other good books would be Hull's <a href="http://www.amazon.com/gp/product/0131499084/sr=8-1/qid=1153458767/ref=pd_bbs_1/102-2851515-7681766?ie=UTF8" target="_blank"><strong>Options, Futures and Other Derivatives</strong></a> and <a href="http://www.amazon.com/gp/product/0470018704/sr=1-1/qid=1153459060/ref=pd_bbs_1/102-2851515-7681766?ie=UTF8&amp;s=books" target="_blank"><strong>Paul Wilmott on Quantitative Finance</strong></a>.<br /><br />Tags: <a href="http://technorati.com/tag/derivatives" rel="tag">derivatives</a> <a href="http://technorati.com/tag/finance" rel="tag">finance</a> <a href="http://technorati.com/tag/math" rel="tag">math</a> <a href="http://technorati.com/tag/quant" rel="tag">quant</a> <a href="http://technorati.com/tag/books" rel="tag">books</a> <a href="http://technorati.com/tag/cfa" rel="tag">cfa</a>]]></content:encoded>
      <pubDate>Fri, 21 Jul 2006 00:38:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/derivatives">derivatives</category>
      <category domain="http://securityratty.com/tag/topics">topics</category>
      <category domain="http://securityratty.com/tag/plain vanilla derivatives">plain vanilla derivatives</category>
      <category domain="http://securityratty.com/tag/discuss topics">discuss topics</category>
      <category domain="http://securityratty.com/tag/quantitative finance topics">quantitative finance topics</category>
      <category domain="http://securityratty.com/tag/financial derivatives">financial derivatives</category>
      <category domain="http://securityratty.com/tag/quantitative finance">quantitative finance</category>
      <category domain="http://securityratty.com/tag/papers">papers</category>
      <category domain="http://securityratty.com/tag/research papers">research papers</category>
      <source url="http://rmquant.blogspot.com/2006/07/brushing-up-on-my-math-skills.html">Brushing up on my math skills...</source>
    </item>
  </channel>
</rss>
