DOE OSTI · 1057509
Defining and Computing a Valued Based Cyber-Security Measure
Abstract
In earlier work, we presented a value based measure of cybersecurity that quantifies the security of a system in concrete terms, specifically, in terms of how much each system stakeholder stands to lose (in dollars per hour of operation) as a result of security threats and system vulnerabilities; our metric varies according to the stakes that each stakeholder has in meeting each security requirement. In this paper, we discuss the specification and design of a system that collects, updates, and maintains all the information that pertains to estimating our cybersecurity measure, and offers stakeholders quantitative means to make security-related decisions.
Explore related subjects
Keep this discovery
Explore connections, maps & timelines
Aissa, Anis Ben, Abercrombie, Robert K, Sheldon, Frederick T, Mili, Ali. 2012-01-01. Defining and Computing a Valued Based Cyber-Security Measure. https://doi.org/10.1007/s10257-011-0177-1
Cite the original work for its findings. Save a collection to share your selection of sources.