@inproceedings{discovery20102,
       booktitle = {Proceedings of the 7th Annual Workshop on the Economics of Information Security (WEIS 2008)},
         address = {Hanover, NH, USA},
         journal = {WEIS},
       publisher = {Workshop on the Economics of Information Security (WEIS)},
          series = {Annual Workshop on the Economics of Information Security},
           title = {Modelling the Human and Technological Costs and Benefits of USB Memory Stick Security},
          volume = {7},
            year = {2008},
           month = {June},
        abstract = {Organizations deploy systems technologies in order to support their operations and achieve their business
objectives. In so doing, they encounter tensions between the confidentiality, integrity, and availability of information,
and must make investments in information security measures to address these concerns. We discuss
how a macroeconomics-inspired model, analogous to models of interest rate policy used by central banks,
can be used to understand trade-offs between investments against threats to confidentiality and availability.
We investigate how such a model might be formulated by constructing a process model, based on empirically
obtained data, of the use of USB memory sticks by employees of a financial services company.},
             url = {http://www.informatik.uni-trier.de/~ley/db/conf/weis/weis2008.html},
          author = {Beautement, A and Coles, R and Griffin, J and Ioannidis, C and Monahan, B and Pym, DJ and Sasse, MA and Wonham, M}
}