IWSEC
2010
Springer
13 years 11 months ago
2010
Springer
Abstract. Planning information security investment is somewhere between art and science. This paper reviews and compares existing scientific approaches and discusses the relation ...
IEEESP
2010
13 years 11 months ago
2010
Abstract. We devise a model for security investment that reflects dynamic interaction between a defender, who faces uncertainty, and an attacker, who repeatedly targets the weakes...
CSFW
2008
IEEE
14 years 7 months ago
2008
IEEE
In various settings, such as when customers use the same passwords at several independent web sites, security decisions by one organization may have a significant impact on the s...