Risk Management and Investment - Revision history

Gili at 20:42, 7 August 2012

2012-08-07T20:42:25Z

← Older revision		Revision as of 20:42, 7 August 2012
Line 2:		Line 2:

	{{Filtered_Table\|\|4.2.1,false}}		{{Filtered_Table\|\|4.2.1,false}}


	''[[Table of Contents\| Jump to Table of Contents]]''		''[[Table of Contents\| Jump to Table of Contents]]''

Gili: Replaced content with "'' TOC-> Issues-> Economics of Cybersecurity->Risk Management and Investment'' {{Filtered_Table||4...."

2012-07-31T21:29:27Z

Replaced content with "'' TOC-> Issues-> Economics of Cybersecurity->Risk Management and Investment'' {{Filtered_Table||4...."

@@ Line 1: / Line 1: @@
 ''[[Table of Contents | TOC->]][[Issues | Issues->]][[Economics of Cybersecurity | Economics of Cybersecurity->]][[Risk Management and Investment]]''
-{| class="wikitable sortable" border="1" cellpadding="1" cellspacing="0" style="border: 1px solid LightGrey;"
+{{Filtered_Table||4.2.1,false}}
 ''[[Table of Contents| Jump to Table of Contents]]''

WikiSysop at 20:43, 20 August 2010

2010-08-20T20:43:06Z

WikiSysop at 19:26, 20 August 2010

2010-08-20T19:26:47Z

← Older revision		Revision as of 19:26, 20 August 2010
Line 30:		Line 30:
	\|Financial Services Sector Coordinating Council for Critical Infrastructure Protection\|\|\|\|2008\|\|[[Research Agenda for the Banking and Finance Sector]]\|\|Independent Reports\|\|None\|\|[http://www.cyber.st.dhs.gov/docs/RD_Agenda-FINAL.pdf ''Pdf'']		\|Financial Services Sector Coordinating Council for Critical Infrastructure Protection\|\|\|\|2008\|\|[[Research Agenda for the Banking and Finance Sector]]\|\|Independent Reports\|\|None\|\|[http://www.cyber.st.dhs.gov/docs/RD_Agenda-FINAL.pdf ''Pdf'']
	\|-		\|-
	\|Franklin, Jason, et. al\|\|\|\|2007\|\|[[An Inquiry into the Nature and Causes of the Wealth of Internet Miscreants]]\|\|~~Conference~~ Paper\|\|Low:Statistics; Low:Economics\|\|[http://sparrow.ece.cmu.edu/group/pub/franklin_paxson_perrig_savage_miscreants.pdf ''Pdf''] [http://www.cs.cmu.edu/~jfrankli/acmccs07/ccs07_franklin_eCrime.pdf ''Alt Pdf'']		\|Franklin, Jason, et. al\|\|\|\|2007\|\|[[An Inquiry into the Nature and Causes of the Wealth of Internet Miscreants]]\|\|Conf. Paper\|\|Low:Statistics; Low:Economics\|\|[http://sparrow.ece.cmu.edu/group/pub/franklin_paxson_perrig_savage_miscreants.pdf ''Pdf''] [http://www.cs.cmu.edu/~jfrankli/acmccs07/ccs07_franklin_eCrime.pdf ''Alt Pdf'']
	\|-		\|-
	\|Grady, Mark F.\|\|Parisi, Francesco\|\|2006\|\|[[The Law and Economics of Cybersecurity]]\|\|Book\|\|Low:Economics; Low:Law\|\|N/A		\|Grady, Mark F.\|\|Parisi, Francesco\|\|2006\|\|[[The Law and Economics of Cybersecurity]]\|\|Book\|\|Low:Economics; Low:Law\|\|N/A

WikiSysop at 17:10, 20 August 2010

2010-08-20T17:10:03Z

← Older revision		Revision as of 17:10, 20 August 2010
Line 1:		Line 1:
	''[[Table of Contents \| TOC->]][[Issues \| Issues->]][[Economics of Cybersecurity \| Economics of Cybersecurity->]][[Risk Management and Investment]]''		''[[Table of Contents \| TOC->]][[Issues \| Issues->]][[Economics of Cybersecurity \| Economics of Cybersecurity->]][[Risk Management and Investment]]''

	~~Camp, L. Jean and Wolfram, Catherine (2004) [[Pricing Security]]~~

	{\| class="wikitable sortable" border="1" cellpadding="1" cellspacing="0" style="border: 1px solid LightGrey;"		{\| class="wikitable sortable" border="1" cellpadding="1" cellspacing="0" style="border: 1px solid LightGrey;"

WikiSysop at 17:09, 20 August 2010

2010-08-20T17:09:11Z

← Older revision		Revision as of 17:09, 20 August 2010
Line 23:		Line 23:
	\|-		\|-
	\|Camp, L. Jean\|\|Lewis, Stephen\|\|2004\|\|[[Economics of Information Security]]\|\|Book\|\|High:Economics\|\|N/A		\|Camp, L. Jean\|\|Lewis, Stephen\|\|2004\|\|[[Economics of Information Security]]\|\|Book\|\|High:Economics\|\|N/A
			\|-
			\|Camp, L. Jean\|\|Wolfram, Catherine\|\|2004\|\|[[Pricing Security]]\|\|Book Chapter\|\|Low:Economics\|\|[http://books.google.com/books?id=PbzP9tgeDcAC&lpg=PA17&ots=8AOrvEojH5&dq=Economics%20of%20Information%20Security&lr&pg=PA17#v=onepage&q&f=false ''Web''] [http://papers.ssrn.com/sol3/papers.cfm?abstract_id=894966 ''SSRN'']
	\|-		\|-
	\|Computing Research Association\|\|\|\|2003\|\|[[Four Grand Challenges in Trustworthy Computing]]\|\|Independent Reports\|\|None\|\|[http://www.cyber.st.dhs.gov/docs/CRA%20Grand%20Challenges%202003.pdf ''Pdf'']		\|Computing Research Association\|\|\|\|2003\|\|[[Four Grand Challenges in Trustworthy Computing]]\|\|Independent Reports\|\|None\|\|[http://www.cyber.st.dhs.gov/docs/CRA%20Grand%20Challenges%202003.pdf ''Pdf'']

WikiSysop at 17:02, 20 August 2010

2010-08-20T17:02:51Z

← Older revision		Revision as of 17:02, 20 August 2010
Line 2:		Line 2:

	Camp, L. Jean and Wolfram, Catherine (2004) [[Pricing Security]]		Camp, L. Jean and Wolfram, Catherine (2004) [[Pricing Security]]

	~~van Eeten, Michel J. G. and Bauer, Johannes M. (2008) [[Economics of Malware]]~~

	{\| class="wikitable sortable" border="1" cellpadding="1" cellspacing="0" style="border: 1px solid LightGrey;"		{\| class="wikitable sortable" border="1" cellpadding="1" cellspacing="0" style="border: 1px solid LightGrey;"
Line 49:		Line 47:
	\|-		\|-
	\|Schneier, Bruce\|\|\|\|2008\|\|[[Schneier on Security]]\|\|Book\|\|None\|\|[http://www.schneier.com/book-sos.html ''Purchase'']		\|Schneier, Bruce\|\|\|\|2008\|\|[[Schneier on Security]]\|\|Book\|\|None\|\|[http://www.schneier.com/book-sos.html ''Purchase'']
			\|-
			\|van Eeten, Michel J. G.\|\|Bauer, Johannes M.\|\|2008\|\|[[Economics of Malware]]\|\|Non-US Govt. Report\|\|Moderate:Economics\|\|[http://www.oecd.org/dataoecd/53/17/40722462.pdf ''Pdf'']
	\|-		\|-
	\|Varian, Hal\|\|\|\|2000\|\|[[Managing Online Security Risks]]\|\|Newspaper Article\|\|None\|\|[http://people.ischool.berkeley.edu/~hal/people/hal/NYTimes/2000-06-01.html ''Web'']		\|Varian, Hal\|\|\|\|2000\|\|[[Managing Online Security Risks]]\|\|Newspaper Article\|\|None\|\|[http://people.ischool.berkeley.edu/~hal/people/hal/NYTimes/2000-06-01.html ''Web'']

WikiSysop at 16:54, 20 August 2010

2010-08-20T16:54:52Z

← Older revision		Revision as of 16:54, 20 August 2010
Line 4:		Line 4:

	van Eeten, Michel J. G. and Bauer, Johannes M. (2008) [[Economics of Malware]]		van Eeten, Michel J. G. and Bauer, Johannes M. (2008) [[Economics of Malware]]

	~~Varian, Hal (2004) [[System Reliability and Free Riding]]~~

	{\| class="wikitable sortable" border="1" cellpadding="1" cellspacing="0" style="border: 1px solid LightGrey;"		{\| class="wikitable sortable" border="1" cellpadding="1" cellspacing="0" style="border: 1px solid LightGrey;"
Line 53:		Line 51:
	\|-		\|-
	\|Varian, Hal\|\|\|\|2000\|\|[[Managing Online Security Risks]]\|\|Newspaper Article\|\|None\|\|[http://people.ischool.berkeley.edu/~hal/people/hal/NYTimes/2000-06-01.html ''Web'']		\|Varian, Hal\|\|\|\|2000\|\|[[Managing Online Security Risks]]\|\|Newspaper Article\|\|None\|\|[http://people.ischool.berkeley.edu/~hal/people/hal/NYTimes/2000-06-01.html ''Web'']
			\|-
			\|Varian, Hal\|\|\|\|2004\|\|[[System Reliability and Free Riding]]\|\|Book Chapter\|\|High:Economics\|\|[http://www.sims.berkeley.edu/resources/affiliates/workshops/econsecurity/econws/48-old.pdf ''Pdf''] [http://people.ischool.berkeley.edu/~hal/Papers/2004/reliability ''AltPdf'']
	\|}		\|}

WikiSysop at 16:49, 20 August 2010

2010-08-20T16:49:04Z

← Older revision		Revision as of 16:49, 20 August 2010
Line 4:		Line 4:

	van Eeten, Michel J. G. and Bauer, Johannes M. (2008) [[Economics of Malware]]		van Eeten, Michel J. G. and Bauer, Johannes M. (2008) [[Economics of Malware]]

	~~Varian, Hal (2000) [[Managing Online Security Risks]]~~

	Varian, Hal (2004) [[System Reliability and Free Riding]]		Varian, Hal (2004) [[System Reliability and Free Riding]]
Line 53:		Line 51:
	\|-		\|-
	\|Schneier, Bruce\|\|\|\|2008\|\|[[Schneier on Security]]\|\|Book\|\|None\|\|[http://www.schneier.com/book-sos.html ''Purchase'']		\|Schneier, Bruce\|\|\|\|2008\|\|[[Schneier on Security]]\|\|Book\|\|None\|\|[http://www.schneier.com/book-sos.html ''Purchase'']
			\|-
			\|Varian, Hal\|\|\|\|2000\|\|[[Managing Online Security Risks]]\|\|Newspaper Article\|\|None\|\|[http://people.ischool.berkeley.edu/~hal/people/hal/NYTimes/2000-06-01.html ''Web'']
	\|}		\|}

WikiSysop at 20:10, 19 August 2010

2010-08-19T20:10:46Z

← Older revision		Revision as of 20:10, 19 August 2010
Line 1:		Line 1:
	''[[Table of Contents \| TOC->]][[Issues \| Issues->]][[Economics of Cybersecurity \| Economics of Cybersecurity->]][[Risk Management and Investment]]''		''[[Table of Contents \| TOC->]][[Issues \| Issues->]][[Economics of Cybersecurity \| Economics of Cybersecurity->]][[Risk Management and Investment]]''

	~~Arora et al. (2006) [[Does Information Security Attack Frequency Increase With Vulnerability Disclosure]]~~

	Camp, L. Jean and Wolfram, Catherine (2004) [[Pricing Security]]		Camp, L. Jean and Wolfram, Catherine (2004) [[Pricing Security]]
Line 25:		Line 23:
	\|Anderson, Ross\|\|Moore, Tyler\|\|2006\|\|[[The Economics of Information Security]]\|\|Journal Article\|\|Low:Economics\|\|[http://people.seas.harvard.edu/~tmoore/science-econ.pdf ''Pdf'']		\|Anderson, Ross\|\|Moore, Tyler\|\|2006\|\|[[The Economics of Information Security]]\|\|Journal Article\|\|Low:Economics\|\|[http://people.seas.harvard.edu/~tmoore/science-econ.pdf ''Pdf'']
	[http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.89.3331&rep=rep1&type=pdf ''AltPdf'']		[http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.89.3331&rep=rep1&type=pdf ''AltPdf'']
			\|-
			\|Arora et al.\|\|\|\|2006\|\|[[Does Information Security Attack Frequency Increase With Vulnerability Disclosure]]\|\|Journal Article\|\|Moderate:Economics\|\|[http://www.heinz.cmu.edu/~rtelang/vuln_freq_ISF.pdf ''Pdf'']
	\|-		\|-
	\|Aviram, Amitai\|\|Tor, Avishalom\|\|2004\|\|[[Overcoming Impediments to Information Sharing]]\|\|Law Review\|\|Low:Economics\|\|[http://law.haifa.ac.il/faculty/lec_papers/tor/55Ala1.L.Rev.231.pdf ''Pdf''] [http://papers.ssrn.com/sol3/papers.cfm?abstract_id=435600 ''SSRN'']		\|Aviram, Amitai\|\|Tor, Avishalom\|\|2004\|\|[[Overcoming Impediments to Information Sharing]]\|\|Law Review\|\|Low:Economics\|\|[http://law.haifa.ac.il/faculty/lec_papers/tor/55Ala1.L.Rev.231.pdf ''Pdf''] [http://papers.ssrn.com/sol3/papers.cfm?abstract_id=435600 ''SSRN'']

← Older revision		Revision as of 20:43, 20 August 2010
Line 24:		Line 24:
	\|Camp, L. Jean\|\|Wolfram, Catherine\|\|2004\|\|[[Pricing Security]]\|\|Book Chapter\|\|Low:Economics\|\|[http://books.google.com/books?id=PbzP9tgeDcAC&lpg=PA17&ots=8AOrvEojH5&dq=Economics%20of%20Information%20Security&lr&pg=PA17#v=onepage&q&f=false ''Web''] [http://papers.ssrn.com/sol3/papers.cfm?abstract_id=894966 ''SSRN'']		\|Camp, L. Jean\|\|Wolfram, Catherine\|\|2004\|\|[[Pricing Security]]\|\|Book Chapter\|\|Low:Economics\|\|[http://books.google.com/books?id=PbzP9tgeDcAC&lpg=PA17&ots=8AOrvEojH5&dq=Economics%20of%20Information%20Security&lr&pg=PA17#v=onepage&q&f=false ''Web''] [http://papers.ssrn.com/sol3/papers.cfm?abstract_id=894966 ''SSRN'']
	\|-		\|-
	\|Computing Research Association\|\|\|\|2003\|\|[[Four Grand Challenges in Trustworthy Computing]]\|\|Independent ~~Reports~~\|\|None\|\|[http://www.cyber.st.dhs.gov/docs/CRA%20Grand%20Challenges%202003.pdf ''Pdf'']		\|Computing Research Association\|\|\|\|2003\|\|[[Four Grand Challenges in Trustworthy Computing]]\|\|Independent Report\|\|None\|\|[http://www.cyber.st.dhs.gov/docs/CRA%20Grand%20Challenges%202003.pdf ''Pdf'']
	\|-		\|-
	\|Department of Defense\|\|\|\|2007\|\|[[Mission Impact of Foreign Influence on DoD Software]]\|\|Government Report\|\|Low:Defense Policy/Procurement\|\|[http://www.cyber.st.dhs.gov/docs/Defense%20Science%20Board%20Task%20Force%20-%20Report%20on%20Mission%20Impact%20of%20Foreign%20Influence%20on%20DoD%20Software%20(2007).pdf ''Pdf'']		\|Department of Defense\|\|\|\|2007\|\|[[Mission Impact of Foreign Influence on DoD Software]]\|\|Government Report\|\|Low:Defense Policy/Procurement\|\|[http://www.cyber.st.dhs.gov/docs/Defense%20Science%20Board%20Task%20Force%20-%20Report%20on%20Mission%20Impact%20of%20Foreign%20Influence%20on%20DoD%20Software%20(2007).pdf ''Pdf'']
	\|-		\|-
	\|Financial Services Sector Coordinating Council for Critical Infrastructure Protection\|\|\|\|2008\|\|[[Research Agenda for the Banking and Finance Sector]]\|\|Independent ~~Reports~~\|\|None\|\|[http://www.cyber.st.dhs.gov/docs/RD_Agenda-FINAL.pdf ''Pdf'']		\|Financial Services Sector Coordinating Council for Critical Infrastructure Protection\|\|\|\|2008\|\|[[Research Agenda for the Banking and Finance Sector]]\|\|Independent Report\|\|None\|\|[http://www.cyber.st.dhs.gov/docs/RD_Agenda-FINAL.pdf ''Pdf'']
	\|-		\|-
	\|Franklin, Jason, et. al\|\|\|\|2007\|\|[[An Inquiry into the Nature and Causes of the Wealth of Internet Miscreants]]\|\|Conf. Paper\|\|Low:Statistics; Low:Economics\|\|[http://sparrow.ece.cmu.edu/group/pub/franklin_paxson_perrig_savage_miscreants.pdf ''Pdf''] [http://www.cs.cmu.edu/~jfrankli/acmccs07/ccs07_franklin_eCrime.pdf ''Alt Pdf'']		\|Franklin, Jason, et. al\|\|\|\|2007\|\|[[An Inquiry into the Nature and Causes of the Wealth of Internet Miscreants]]\|\|Conf. Paper\|\|Low:Statistics; Low:Economics\|\|[http://sparrow.ece.cmu.edu/group/pub/franklin_paxson_perrig_savage_miscreants.pdf ''Pdf''] [http://www.cs.cmu.edu/~jfrankli/acmccs07/ccs07_franklin_eCrime.pdf ''Alt Pdf'']
Line 34:		Line 34:
	\|Grady, Mark F.\|\|Parisi, Francesco\|\|2006\|\|[[The Law and Economics of Cybersecurity]]\|\|Book\|\|Low:Economics; Low:Law\|\|N/A		\|Grady, Mark F.\|\|Parisi, Francesco\|\|2006\|\|[[The Law and Economics of Cybersecurity]]\|\|Book\|\|Low:Economics; Low:Law\|\|N/A
	\|-		\|-
	\|Institute for Information Infrastructure Protection\|\|\|\|2003\|\|[[Cyber Security Research and Development Agenda]]\|\|Independent ~~Reports~~\|\|Low/None:Technology\|\|[http://www.cyber.st.dhs.gov/docs/I3P%20Research%20Agenda%202003.pdf ''Pdf'']		\|Institute for Information Infrastructure Protection\|\|\|\|2003\|\|[[Cyber Security Research and Development Agenda]]\|\|Independent Report\|\|Low/None:Technology\|\|[http://www.cyber.st.dhs.gov/docs/I3P%20Research%20Agenda%202003.pdf ''Pdf'']
	\|-		\|-
	\|Johnson, Eric M.\|\|\|\|2008\|\|[[Managing Information Risk and the Economics of Security]]\|\|Book\|\|High:Economics\|\|N/A		\|Johnson, Eric M.\|\|\|\|2008\|\|[[Managing Information Risk and the Economics of Security]]\|\|Book\|\|High:Economics\|\|N/A
Line 42:		Line 42:
	\|National Institute of Standards and Technology\|\|\|\|2006\|\|[[SP 800-82: Guide to Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems Security]]\|\|Government Report\|\|Moderate:Technology\|\|[http://www.cyber.st.dhs.gov/docs/NIST%20Guide%20to%20Supervisory%20and%20Data%20Acquisition-SCADA%20and%20Industrial%20Control%20Systems%20Security%20(2007).pdf ''Pdf'']		\|National Institute of Standards and Technology\|\|\|\|2006\|\|[[SP 800-82: Guide to Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems Security]]\|\|Government Report\|\|Moderate:Technology\|\|[http://www.cyber.st.dhs.gov/docs/NIST%20Guide%20to%20Supervisory%20and%20Data%20Acquisition-SCADA%20and%20Industrial%20Control%20Systems%20Security%20(2007).pdf ''Pdf'']
	\|-		\|-
	\|National Research Council\|\|\|\|2007\|\|[[Toward a Safer and More Secure Cyberspace]]\|\|Independent ~~Reports~~\|\|Low:Research Processes; Low:Technology\|\|[http://www.cyber.st.dhs.gov/docs/Toward_a_Safer_and_More_Secure_Cyberspace-Full_report.pdf ''Pdf'']		\|National Research Council\|\|\|\|2007\|\|[[Toward a Safer and More Secure Cyberspace]]\|\|Independent Report\|\|Low:Research Processes; Low:Technology\|\|[http://www.cyber.st.dhs.gov/docs/Toward_a_Safer_and_More_Secure_Cyberspace-Full_report.pdf ''Pdf'']
	\|-		\|-
	\|National Research Council\|\|\|\|1999\|\|[[Trust in Cyberspace]]\|\|Independent ~~Reports~~\|\|Moderate:Technology\|\|[http://www.cyber.st.dhs.gov/docs/Trust%20in%20Cyberspace%20Report%201999.pdf ''Pdf'']		\|National Research Council\|\|\|\|1999\|\|[[Trust in Cyberspace]]\|\|Independent Report\|\|Moderate:Technology\|\|[http://www.cyber.st.dhs.gov/docs/Trust%20in%20Cyberspace%20Report%201999.pdf ''Pdf'']
	\|-		\|-
	\|Schneier, Bruce\|\|\|\|2008\|\|[[Schneier on Security]]\|\|Book\|\|None\|\|[http://www.schneier.com/book-sos.html ''Purchase'']		\|Schneier, Bruce\|\|\|\|2008\|\|[[Schneier on Security]]\|\|Book\|\|None\|\|[http://www.schneier.com/book-sos.html ''Purchase'']