A Formal Attack Centric Framework Highlighting Expected Losses of an Information Security Breach

16RT14 A transitions-based framework for estimating expected credit losses

This paper presents a framework for estimating losses for residential mortgage loans. At the core is a transitions-based probability of default model which yields directly observable cash-flows at the loan level. The estimated model includes coefficients on unemployment, Loan to Value ratio and interest rates, all of which allow a macroeconomic scenario to be fed through the model and impact lo...

Disclosure of Information Theft: The ChoicePoint Security Breach

n recent months, the media have reported several major securi ty breaches. Hackers have stolen the personal information of thousands of individuals from leading banks, credit bureaus, and insurance companies. In other cases, computers and disks with highly confidential data have simply vanished at the airport security counter or from vehicles parked in the company lot. Stolen data may include s...

On a formal framework for security properties

A new approach to property-based characterisation of security requirements is presented. The main goal is to provide a framework for the specification of a wide variety of security requirements with formal semantics in terms of security properties of a discrete model of a system. In contrast to previous approaches it is not focused on a special type of security property. The classical concept o...

The Ripple Effect of an Information Security Breach Event: A Stakeholder Analysis

Can cross-listing mitigate the impact of an information security breach announcement on a firm's values?

The increase in globalization in the markets has driven firms to adopt online technologies and to cross-list their stocks. Recent studies have consistently found that the announcements of information security breaches (ISBs) are negatively associated with the market values of the announcing firms during the days surrounding the breach announcements. Given the improvement in firms’ information e...