Issue No. 01 - January/February (2010 vol. 8)
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/MSP.2010.51
Rainer Böhme , International Computer Science Institute
Tyler Moore , Harvard University
We outline a model for security investment that reflects dynamic interaction between a defender, who faces uncertainty, and an attacker, who repeatedly targets the weakest link. Using the model, we derive and compare optimal security investment over multiple periods, exploring the delicate balance between proactive and reactive security investment.
economics, security, optimal security investment under uncertainty, ROSI
R. Böhme and T. Moore, "The Iterated Weakest Link," in IEEE Security & Privacy, vol. 8, no. , pp. 53-55, 2010.