Information security trade-offs and optimal patching policies
نویسندگان
چکیده
منابع مشابه
Information security trade-offs and optimal patching policies
We develop and simulate a basic mathematical model of the costly deployment of software patches in the presence of trade-offs between confidentiality and availability. The model incorporates representations of the key aspects of the system architecture, the managers’ preferences, and the stochastic nature of the threat environment. Using the model, we compute the optimal frequencies for regular...
متن کاملInvestments and Trade-offs in the Economics of Information Security
We develop and simulate a dynamic model of investment in information security. The model is based on the recognition that both IT managers and users appreciate the trade-off between two of the fundamental characteristics of information security, namely confidentiality and availability. The model’s parameters can be clustered in a manner that allows us to categorize and compare the responses to ...
متن کاملBalancing IT Security Management Model Trade-Offs
IT security professionals' effectiveness in an organization is influenced not only by how usable their security management tools are but also by how well the organization's security management model (SMM) fits. Finding the right SMM is critical but can be challenging — trade-offs are inherent to each approach but their implications aren't always clear. The authors present a case study of one ac...
متن کاملRicher Efficiency/Security Trade-offs in 2PC
The dual-execution protocol of Mohassel & Franklin (PKC 2006) is a highly efficient (each party garbling only one circuit) 2PC protocol that achieves malicious security apart from leaking an arbitrary, adversarially-chosen predicate about the honest party’s input. We present two practical and orthogonal approaches to improve the security of the dual-execution technique. First, we show how to gr...
متن کاملOptimal Trade-offs in Distribution Protection Design
The number, type and location of the protective devices on a distribution feeder have a direct effect on the system reliability. In earlier work, a technique was developed to design a protective system in order to minimize the SAIFI index. This paper extends earlier results by using a goal programming approach to achieve compromises among various engineering objectives. The design goals are: a)...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
ژورنال
عنوان ژورنال: European Journal of Operational Research
سال: 2012
ISSN: 0377-2217
DOI: 10.1016/j.ejor.2011.05.050