Issue No.03 - May/June (2009 vol.7)
Daniel E. Geer Jr. , In-Q-Tel
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/MSP.2009.57
Cost-effectiveness analysis, which avoids the awkward problem of assigning a firm value to digital assets, is a more appropriate approach to measuring computer security than cost-benefit analysis.
cost-effectiveness analysis, cost-benefit analysis, security & privacy, for good measure
Daniel E. Geer Jr., "A Doubt of the Benefit", IEEE Security & Privacy, vol.7, no. 3, pp. 86-87, May/June 2009, doi:10.1109/MSP.2009.57