Problem areas in computer security assessment
Steve Glaseman, Rein Türn, R. Stockton Gaines · 1977
An important problem area in providing security in computer systems is to avoid excessively costly and constraining security practices while providing an adequate level of security. In addition, there are problems in determining an appropriate level of investment in techniques and practices which enhance security and in the measurement of returns on those investments, i.e., to what degree is security improved by any given technique?