Cost-Effectiveness of Security Measures: A Model-Based Framework

Cost-Effectiveness of Security Measures: A Model-Based Framework

Wolter Pieters (Delft University of Technology, The Netherlands & University of Twente, The Netherlands), Christian W. Probst (Technical University of Denmark, Denmark), Zofia Lukszo (Delft University of Technology, The Netherlands) and Lorena Montoya (University of Twente, The Netherlands)
DOI: 10.4018/978-1-4666-4983-5.ch009
OnDemand PDF Download:
No Current Special Offers


Recently, cyber security has become an important topic on the agenda of many organisations. It is already widely acknowledged that attacks do happen, and decision makers face the problem of how to respond. As it is almost impossible to secure a complex system completely, it is important to have an adequate estimate of the effectiveness of security measures when making investment decisions. Risk concepts are known in principle, but estimating the effectiveness of countermeasure proves to be difficult and cannot be achieved by qualitative approaches only. In this chapter, the authors consider the question of how to guarantee cost-effectiveness of security measures. They investigate the possibility of using existing frameworks and tools, the challenges in a security context as opposed to a safety context, and directions for future research.
Chapter Preview


In this section we cover some of the background needed for performing the necessary analyses to evaluate the cost-effectiveness of security measures.

Complete Chapter List

Search this Book: