The Navigation Metaphor in Security Economics

Wolter Pieters; Jeroen Barendse; Margaret Ford; Claude P. R. Heath; Christian W. Probst; Ruud Verbij

doi:10.1109/MSP.2016.47

The Navigation Metaphor in Security Economics

Wolter Pieters
, Jeroen Barendse
, Margaret Ford
, Claude P. R. Heath
, Christian W. Probst
, Ruud Verbij

Department of Applied Mathematics and Computer Science

Delft University of Technology
LUST
Consult Hyperion
University of London
KPMG N.V.

Research output: Contribution to journal › Journal article › Research › peer-review

631 Downloads (Orbit)

Abstract

The navigation metaphor for cybersecurity merges security architecture models and security economics. By identifying the most efficient routes for gaining access to assets from an attacker's viewpoint, an organization can optimize its defenses along these routes. The well-understood concept of navigation makes it easier to motivate and explain security investment to a wide audience, encouraging strategic security decisions.

Original language	English
Journal	I E E E Security & Privacy Magazine
Volume	14
Issue number	3
Pages (from-to)	14-21
Number of pages	8
ISSN	1540-7993
DOIs	https://doi.org/10.1109/MSP.2016.47
Publication status	Published - 2016

Keywords

Electrical and Electronic Engineering
Computer Networks and Communications
Law
attack navigators
attacker profiles
cyberattacks
e-commerce
hackers
Internet/Web technologies
navigation
security
security economics
security models
visualization
COMPUTER
software architecture
decision making
security of data
strategic security decision
navigation metaphor
cybersecurity
security architecture model
access control
Biological system modeling
Economics
Computer security
Navigation
Electonic commerce
Web servuces
Modeling
Data security
Software engineering techniques

Access to Document

10.1109/MSP.2016.47

PietersBarendseFordHeathProbstVerbij IEEE SP TheNavigationMetaphorInSecurityEconomicsAccepted author manuscript, 374 KB

OpenUrl availability

Check availability in DTU Findit

Cite this

@article{4bf9f9b9ed6b477d945347697f1eb203,

title = "The Navigation Metaphor in Security Economics",

abstract = "The navigation metaphor for cybersecurity merges security architecture models and security economics. By identifying the most efficient routes for gaining access to assets from an attacker's viewpoint, an organization can optimize its defenses along these routes. The well-understood concept of navigation makes it easier to motivate and explain security investment to a wide audience, encouraging strategic security decisions.",

keywords = "Electrical and Electronic Engineering, Computer Networks and Communications, Law, attack navigators, attacker profiles, cyberattacks, e-commerce, hackers, Internet/Web technologies, navigation, security, security economics, security models, visualization, COMPUTER, software architecture, decision making, security of data, strategic security decision, navigation metaphor, cybersecurity, security architecture model, access control, Biological system modeling, Economics, Computer security, Navigation, Electonic commerce, Web servuces, Modeling, Data security, Software engineering techniques",

author = "Wolter Pieters and Jeroen Barendse and Margaret Ford and Heath, \{Claude P. R.\} and Probst, \{Christian W.\} and Ruud Verbij",

year = "2016",

doi = "10.1109/MSP.2016.47",

language = "English",

volume = "14",

pages = "14--21",

journal = "I E E E Security \& Privacy Magazine",

issn = "1540-7993",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

number = "3",

}

TY - JOUR

T1 - The Navigation Metaphor in Security Economics

AU - Pieters, Wolter

AU - Barendse, Jeroen

AU - Ford, Margaret

AU - Heath, Claude P. R.

AU - Probst, Christian W.

AU - Verbij, Ruud

PY - 2016

Y1 - 2016

N2 - The navigation metaphor for cybersecurity merges security architecture models and security economics. By identifying the most efficient routes for gaining access to assets from an attacker's viewpoint, an organization can optimize its defenses along these routes. The well-understood concept of navigation makes it easier to motivate and explain security investment to a wide audience, encouraging strategic security decisions.

AB - The navigation metaphor for cybersecurity merges security architecture models and security economics. By identifying the most efficient routes for gaining access to assets from an attacker's viewpoint, an organization can optimize its defenses along these routes. The well-understood concept of navigation makes it easier to motivate and explain security investment to a wide audience, encouraging strategic security decisions.

KW - Electrical and Electronic Engineering

KW - Computer Networks and Communications

KW - Law

KW - attack navigators

KW - attacker profiles

KW - cyberattacks

KW - e-commerce

KW - hackers

KW - Internet/Web technologies

KW - navigation

KW - security

KW - security economics

KW - security models

KW - visualization

KW - COMPUTER

KW - software architecture

KW - decision making

KW - security of data

KW - strategic security decision

KW - navigation metaphor

KW - cybersecurity

KW - security architecture model

KW - access control

KW - Biological system modeling

KW - Economics

KW - Computer security

KW - Navigation

KW - Electonic commerce

KW - Web servuces

KW - Modeling

KW - Data security

KW - Software engineering techniques

U2 - 10.1109/MSP.2016.47

DO - 10.1109/MSP.2016.47

M3 - Journal article

SN - 1540-7993

VL - 14

SP - 14

EP - 21

JO - I E E E Security & Privacy Magazine

JF - I E E E Security & Privacy Magazine

IS - 3

ER -

The Navigation Metaphor in Security Economics

Abstract

Keywords

Access to Document

OpenUrl availability

Fingerprint

Cite this