SecInvest
Siv Hilde Houmb, Indrajit Ray, Indrakshi Ray · Advances in computer and electrical engineering book series · 2011
Today, millions of users rely on the Internet to do business and to access a wide variety of services. Examples include e-commerce, banking transactions, B2B interactions, multi-player games, blogs, and social networks. Trust in these services is a prerequisite to achieve the full economic potential of information communications technology (ICT). Security economics explore the opportunities of security investments by transforming security from a cost to an asset. This chapter describes SecInvest, a security investment support framework that helps security economists explore such opportunities. SecInvest derives a security solution fitness score that can be used to compare alternative solutions and decide whether to invest in security or take the associated risk. The framework considers various cost variables, investment budget and priorities, laws and regulations, risk level, a priori security status, and other decision variables when deriving the fitness score.