Coles, R; Griffin, J; Johnson, H; Monahan, B; Parkin, SE; Pym, D; Sasse, MA; Coles, R; Griffin, J; Johnson, H; Monahan, B; Parkin, SE; Pym, D; Sasse, MA; van Moorsel, A; - view fewer (2008) Trust economics feasibility study. Presented at: DSN 2008 Workshop on Resilience Assessment and Dependability Benchmarking, Anchorage, Alaska, USA.

Preview

PDF teaard.pdf Available under License : See the attached licence file. Download (194kB)

Abstract

We believe that enterprises and other organisations currently lack sophisticated methods and tools to determine if and how IT changes should be introduced in an organisation, such that objective, measurable goals are met. This is especially true when dealing with security-related IT decisions. We report on a feasibility study, Trust Economics, conducted to demonstrate that such methodology can be developed. Assuming a deep understanding of the IT involved, the main components of our trust economics approach are: (i) assess the economic or financial impact of IT security solutions; (ii) determine how humans interact with or respond to IT security solutions; (iii) based on above, use probabilistic and stochastic modelling tools to analyse the consequences of IT security decisions. In the feasibility study we apply the trust economics methodology to address how enterprises should protect themselves against accidental or malicious misuse of USB memory sticks, an acute problem in many industries.

Download activity - last month

Export as XMLJSONCSV

Download activity - last 12 months

Export as JSONCSVXML

Downloads by country - last 12 months

Export as XMLJSONCSV

Archive Staff Only

View Item