Issue No. 03 - May/June (2009 vol. 7)
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/MSP.2009.57
Daniel G. Conway , Augustana College
Daniel E. Geer Jr. , In-Q-Tel
Cost-effectiveness analysis, which avoids the awkward problem of assigning a firm value to digital assets, is a more appropriate approach to measuring computer security than cost-benefit analysis.
cost-effectiveness analysis, cost-benefit analysis, security & privacy, for good measure
Daniel G. Conway, Daniel E. Geer Jr., "A Doubt of the Benefit", IEEE Security & Privacy, vol. 7, no. , pp. 86-87, May/June 2009, doi:10.1109/MSP.2009.57