Security Metrics and Security Investment Models

No abstract is available for this paper.

• Publication year

  2010

• Venue

  International Workshop on Security

• Publication date

  2010-11-22

• Fields of study

  Computer Science

• Identifiers
  DOI 10.1007/978-3-642-16825-3_2
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• The Iterated Weakest Link - A Model of Adaptive Security Investment

  2016influential reference
• Outsourcing Information Security: Contracting Issues and Security Implications

  2014cited by this paper
• Optimal Information Security Investment with Penetration Testing

  2010cited by this paper
• Fuzzy economic decision-models for information security investment

  2010cited by this paper
• Modeling Cyber-Insurance: Towards a Unifying Framework

  2010cited by this paper
• A Fuzzy Model for IT Security Investments

  2010cited by this paper
• Optimal Timing of Information Security Investment: a Real Options Approach Optimal Timing of Information Security Investment: a Real Options Approach

  2009cited by this paper
• Uncertainty in the weakest-link security game

  2009cited by this paper
• Valuating Privacy with Option Pricing Theory

  2009cited by this paper
• Hard Data Is Good to Find

  2009cited by this paper
• Managing Interdependent Information Security Risks: A Study of Cyberinsurance, Managed Security Service and Risk Pooling

  2009cited by this paper
• Productivity Space of Information Security in an Extension of the Gordon-Loeb's Investment Model

  2008cited by this paper
• Secure or insure?: a game-theoretic analysis of information security games

  2008cited by this paper
• Investments in Information Security: A Real Options Perspective with Bayesian Postaudit

  2008cited by this paper
• Will Outsourcing IT Security Lead to a Higher Social Level of Security?

  2007cited by this paper
• Internet and Network Economics, Third International Workshop, WINE 2007, San Diego, CA, USA, December 12-14, 2007, Proceedings

  2007cited by this paper
• Security Metrics: Replacing Fear, Uncertainty, and Doubt

  2007cited by this paper
• Intrusion Prevention in Information Systems: Reactive and Proactive Responses

  2007cited by this paper
• An Overview of Economic Approaches to Information Security Management

  2006cited by this paper
• Understanding and Influencing Attackers' Decisions: Implications for Security Investment Strategies

  2006cited by this paper
• On the Gordon & Loeb Model for Information Security Investment

  2006cited by this paper
• A Comparison of Market Approaches to Software Vulnerability Disclosure

  2006cited by this paper
• An Empirical Analysis of Security Investment in Countermeasures Based on an Enterprise Survey in Japan

  2006influential reference
• Emerging Trends in Information and Communication Security

  2006cited by this paper
• Returns to information security investment: The effect of alternative information security breach functions on optimal investment and sensitivity to vulnerability

  2006cited by this paper
• Outsourcing Internet Security : The Effect of Transaction Costs on Managed Service Providers

  2005cited by this paper
• A comparison of data warehousing methodologies

  2005cited by this paper
• Economic Security Metrics

  2005cited by this paper
• The Economic Incentives for Sharing Security Information

  2005cited by this paper
• Outsourcing Internet Security: Economic Analysis of Incentives for Managed Security Service Providers

  2005cited by this paper
• The Value of Intrusion Detection Systems in Information Technology Security Architecture

  2005cited by this paper
• Evaluating information security investments using the analytic hierarchy process

  2005cited by this paper
• Vulnerability and information security investment: An empirical analysis of e-local government in Japan

  2005cited by this paper
• System Reliability and Free Riding

  2004cited by this paper
• Improving the ROI of the security management process

  2004cited by this paper
• Information Security Expenditures and Real Options: A Wait-and-See Approach

  2003cited by this paper
• Sharing Information on Computer Systems Security: An Economic Analysis

  2003cited by this paper
• Outsourcing Managed Security Services

  2003cited by this paper
• Interdependent Security

  2003cited by this paper
• The economics of information security investment

  2002influential reference
• Toward cost-sensitive modeling for intrusion detection and response

  2002cited by this paper
• Security Tokens and Their Derivatives

  2001cited by this paper
• How much is enough? A risk management approach to computer security

  2000cited by this paper
• From weakest-link to best-shot: The voluntary provision of public goods

  1983cited by this paper
• Theory of the Firm

  1976cited by this paper

• A bonus and penalty mechanism as an incentive for cybersecurity investments

  2026cites this paper
• Cyber Risk Integration framework for Boards (CRIB): If Boards Had KPIs, Would They Pass?

  2025cites this paper
• An approach based on hexagram model for quantifying security risks with Performance Key Indicators (PKI)

  2024cites this paper
• QuantTM: Business-Centric Threat Quantification for Risk Management and Cyber Resilience

  2024cites this paper
• Approach To Risk Management Based On The Assessment Of The Cost Of Quality Of Implementation Of Cybersecurity Measures Of The Organization

  2024influential citation
• The effects of required security on software development effort

  2023cites this paper
• Thrifty Guardians: Overcoming the Challenges of Establishing Security Champions on a Limited Budget

  2023cites this paper
• Predictive Taxonomy Analytics (LASSO): Predicting Outcome Types of Cyber Breach

  2023cites this paper
• Cyber Risk Assessment and Optimization: A Small Business Case Study

  2023cites this paper
• A Methodology for Quantifying the Value of Cybersecurity Investments in the Navy

  2022influential citation
• Cybersecurity For Defense Economists

  2022cites this paper
• MEASURING THE TECHNICAL PERFORMANCE OF A SECURITY OPERATIONS CENTER

  2022cites this paper
• Expanding the Gordon-Loeb model to cyber-insurance

  2021cites this paper
• Improving Online Privacy and Security Through Crowdsourced Transparency Platforms and Operator Notifications

  2021cites this paper
• Cyber Risk Quantification: Investigating the Role of Cyber Value at Risk

  2021influential citation
• Maturity level assessments of information security controls: An empirical analysis of practitioners assessment capabilities

  2021cites this paper
• Evaluating the Security and Economic Effects of Moving Target Defense Techniques on the Cloud

  2020cites this paper
• Selecting a Secure Cloud Provider - An Empirical Study and Multi Criteria Approach

  2020cites this paper
• Privacy and Identity Management. Data for Better Living: AI and Privacy: 14th IFIP WG 9.2, 9.6/11.7, 11.6/SIG 9.2.2 International Summer School, Windisch, Switzerland, August 19–23, 2019, Revised Selected Papers

  2020cites this paper
• Modelo para medir el retorno sobre la inversión en seguridad informática y de la información - ROSI

  2020cites this paper
• Investigating Target Selection and Financial Impact of Service Fraud: An empirical research into criminal activities on underground markets and their implications for businesses

  2020cites this paper
• Vergleichbare Informationssicherheits-Kennzahlen innerhalb einer Branche

  2020cites this paper
• Underlying and Consequential Costs of Cyber Security Breaches: Changes in Systematic Risk

  2020cites this paper
• Novel approach to enhance network security using key performance indicator in business analytics

  2020cites this paper
• Intelligence, Cyberspace, and National Security

  2020cites this paper
• Cybersecurity hazards and financial system vulnerability: a synthesis of literature

  2020influential citation
• SoK: linking information security metrics to management success factors

  2020cites this paper
• Defense in Depth: The Basics of Blockade and Delay

  2019cites this paper
• A Graph Updating Method of Data Theft Detection Based on Rough Set

  2019cites this paper
• A Structured Comparison of the Corporate Information Security Maturity Level

  2019cites this paper
• Modeling the Impact of Cyber Threats on an Organization's Information System in the Framework of Cyber-Risk Insurance

  2019cites this paper
• Empirical Analysis of a Cybersecurity Scoring System

  2019influential citation
• Aggregating Corporate Information Security Maturity Levels of Different Assets

  2019cites this paper
• SEConomy: A Framework for the Economic Assessment of Cybersecurity

  2019influential citation
• Design Methodology for Determining the Financial Damage caused by Cyber Threats in the Field of Insurance

  2019cites this paper
• Modelling and simulation applications on cyber-physical systems' security and resilience

  2019cites this paper
• Monte Carlo methods to investigate how aggregated cyber insurance claims data impacts security investments

  2018cites this paper
• Automated security investment analysis of dynamic networks

  2018cites this paper
• A Fundamental Approach to Cyber Risk Analysis

  2018cites this paper
• Cyber Insurance

  2018cites this paper
• A Data Leakage Prevention Method Based on the Reduction of Confidential and Context Terms for Smart Mobile Devices

  2018cites this paper
• How Stakeholders Perceived Security Risks? A New Predictive Functional Level Model and its Application to E-Learning

  2018cites this paper
• The influence of cyber insurance policies on the cyber security ecosystem

  2018cites this paper
• Attribute Evaluation on Attack Trees with Incomplete Information

  2018cites this paper
• Dynamic cybersecurity modelling and analysis.

  2018influential citation
• Architecting Cyber-Secure, Resilient System-of-Systems

  2018cites this paper
• Measuring Application Security

  2018cites this paper
• Analysing the impact of cyber insurance on the cyber security ecosystem: Utilising agent-based modelling to explore the effects of insurance policies

  2018cites this paper
• Designing Organizations for Cyber Security Resilience

  2018cites this paper
• Cyber-insurance survey

  2017cites this paper
• Evidence-based security configurations for cloud datastores

  2017cites this paper
• THE HUMAN FACTOR IN CYBERCRIME AND CYBERSECURITY

  2017cites this paper
• Towards effective cybersecurity resource allocation: the Monte Carlo predictive modelling approach

  2017cites this paper
• Why the Equifax Breach Should Not Have Mattered

  2017cites this paper
• Metrics for Cyber Robustness

  2017cites this paper
• Cybersecurity Cost of Quality: Managing the Costs of Cybersecurity Risk Management

  2017cites this paper
• An evidence-based cloud incident handling framework

  2016cites this paper
• Considerations on the selection and prioritization of information security solutions

  2016cites this paper
• Overview of Security Metrics

  2016cites this paper
• Measuring Attitude towards Risk Treatment Actions amongst Information Security Professionals : an Experimental Approach

  2016cites this paper
• Security Metrics and the Risks: An Overview

  2016cites this paper
• A differential game approach to security investment and information sharing in a competitive environment

  2016cites this paper
• Attack-prevention and damage-control investments in cybersecurity

  2016cites this paper
• Case study: predicting the impact of a physical access control intervention

  2016cites this paper
• An Empirical Analysis of Cyber Security Incidents at a Large Organization

  2016cites this paper
• Externalities and the Magnitude of Cyber Security Underinvestment by Private Sector Firms: A Modification of the Gordon-Loeb Model

  2015cites this paper
• Allocation of resources to cyber-security: The effect of misalignment of interest between managers and investors

  2015cites this paper
• Improving Network Security Via Cyber-Insurance A Market Analysis

  2015cites this paper
• Attack-Deterring and Damage-Control Investments in Cybersecurity

  2015cites this paper
• "If you were attacked, you'd be sorry": Counterfactuals as security arguments

  2015influential citation
• Identifying How Firms Manage Cybersecurity Investment

  2015influential citation
• 2 14491 – Socio-Technical Security Metrics 1 Executive Summary

  2015cites this paper
• CyVar: Extending Var-At-Risk to ICT

  2015cites this paper
• Realizing Efficient Cyber-Insurance Markets Via Price Discriminating Security Products

  2015cites this paper
• Integrating digital forensic practices in cloud incident handling: A conceptual Cloud Incident Handling Model

  2015cites this paper
• Risk Assessment and Risk-Driven Testing

  2015cites this paper
• A Short Review of Multi-Criteria Decision Analysis Techniques

  2014cites this paper
• Reinforcement Learning Algorithms for Adaptive Cyber Defense against Heartbleed

  2014cites this paper
• Design Criteria and Design Concepts for an Integrated Management Platform of IT Infrastructure Metrics

  2014cites this paper
• Anjali Kaushik: Sailing safe in cyberspace: protect your identity and data

  2014cites this paper
• On the Measurement of Data Protection Compliance of Cloud Services

  2014cites this paper
• Optimal Defense Strategies for DDoS Defender Using Bayesian Game Model

  2013cites this paper
• Cyber-risk decision models: To insure IT or not?

  2013influential citation
• Stakeholder Oriented Information Security Reporting

  2013cites this paper
• Adoption of security as a service

  2013cites this paper
• To Invest or Not to Invest? Assessing the Economic Viability of a Policy and Security Configuration Management Tool

  2012cites this paper
• Security Audits Revisited

  2012cites this paper
• Development and Trial Application of Prototype Program for "Social-MRC": Social Consensus Formation Support System Concerning IT Risk Countermeasures

  2011cites this paper
• Wann sind IT-Security-Audits nützlich?

  2011cites this paper
• Proposal for a Social-MRC social consensus formation support system concerning IT Risk countermeasures

  2010cites this paper
• The International Journal On Advances in Systems and Measurements is Published by IARIA

  2009cites this paper
• The stock market impact of information security investments: The case of security standards

  year unknowncites this paper