Issue No.04 - July/August (2009 vol.7)
Rachel Rue , RAND
Shari Lawrence Pfleeger , RAND
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/MSP.2009.98
This article describes an analysis of several representative cybersecurity economic models, where the authors seek to determine whether each model's underlying assumptions are realistic and useful. They find that many of the assumptions are the same across disparate models, and most assumptions are far from realistic. They recommend several changes so that the predictions from economic models can be more relevant and useful.
Cybersecurity, economic models, vulnerability, security function, security and privacy
Rachel Rue, Shari Lawrence Pfleeger, "Making the Best Use of Cybersecurity Economic Models", IEEE Security & Privacy, vol.7, no. 4, pp. 52-60, July/August 2009, doi:10.1109/MSP.2009.98