Issue No. 03 - May/June (2009 vol. 7)
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/MSP.2009.57
Daniel E. Geer Jr. , In-Q-Tel
Daniel G. Conway , Augustana College
Cost-effectiveness analysis, which avoids the awkward problem of assigning a firm value to digital assets, is a more appropriate approach to measuring computer security than cost-benefit analysis.
cost-effectiveness analysis, cost-benefit analysis, security & privacy, for good measure
D. G. Conway and D. E. Geer Jr., "A Doubt of the Benefit," in IEEE Security & Privacy, vol. 7, no. , pp. 86-87, 2009.