Evaluating Information Security Investments from Attackers Perspective: the Return-On-Attack (ROA).
作者： Marco Cremonini , Patrizia Martini
DOI:
关键词:
摘要: … To this end, we suggest that to better evaluate security technology investments, the ROI index should be coupled with a corresponding index aimed at measuring how the attacker’s …
infosecon.net 参考文章(4)
Martin P. Loeb, Lawrence A. Gordon, William Lucyshyn, Information Security Expenditures and Real Options: A Wait-and-See Approach Social Science Research Network. ,(2003)
R. Anderson, Why information security is hard - an economic perspective annual computer security applications conference. pp. 358- 365 ,(2001) , 10.1109/ACSAC.2001.991552
Lawrence A. Gordon, Martin P. Loeb, The economics of information security investment ACM Transactions on Information and System Security. ,vol. 5, pp. 438- 457 ,(2002) , 10.1145/581271.581274
Huseyin Cavusoglu, Birendra Mishra, Srinivasan Raghunathan, A model for evaluating IT security investments Communications of the ACM. ,vol. 47, pp. 87- 92 ,(2004) , 10.1145/1005817.1005828