摘要: Quantification tools, if applied prudently, can assist in the anticipation, budgeting, and control of direct indirect computer security costs.
unirioja.es
acm.org
notable-software.com 参考文章(5)
R. Anderson, Why information security is hard - an economic perspective annual computer security applications conference. pp. 358- 365 ,(2001) , 10.1109/ACSAC.2001.991552
Robert D. Silverman, A Cost-Based Security Analysis of Symmetric and Asymmetric Key Lengths ,(2000)
Perry Wagle, Steve Beattie, Crispin Cowan, Seth Arnold, Chris Wright, Adam Shostack, Timing the Application of Security Patches for Optimal Uptime usenix large installation systems administration conference. pp. 233- 242 ,(2002)
Peter R. Orszag, B James, David L. Gunter, Paul C. Light, Interdependent Security: Implications for Homeland Security Policy and Other Areas ,(2002)
Martin P. Loeb, Lawrence A. Gordon, Return on information security investments: Myths vs. Realities. Strategic Finance. ,vol. 84, pp. 26- 31 ,(2002)