The Navigation Metaphor in Security Economics

Wolter Pieters; Jeroen Barendse; Margaret Ford; Claude Heath; Christian W. Probst; Ruud Verbij

doi:10.1109/MSP.2016.47

The Navigation Metaphor in Security Economics

Wolter Pieters, Jeroen Barendse, Margaret Ford, Claude Heath, Christian W. Probst, Ruud Verbij

Department of Information Security

Research output: Contribution to journal › Article › peer-review

Abstract

The navigation metaphor for cybersecurity merges security architecture models and security economics. By identifying the most efficient routes for gaining access to assets from an attacker's viewpoint, an organization can optimize its defenses along these routes. The well-understood concept of navigation makes it easier to motivate and explain security investment to a wide audience, encouraging strategic security decisions.

Original language	English
Pages (from-to)	14-21
Number of pages	8
Journal	IEEE Security and Privacy Magazine
Volume	14
Issue number	3
DOIs	https://doi.org/10.1109/MSP.2016.47
Publication status	Published - 25 May 2016

Keywords

attack navigators
attacker profiles
cyberattacks
e-commerce
hackers
Internet/Web technologies
navigation
security
security economics
security models
visualization

Access to Document

10.1109/MSP.2016.47

Cite this

@article{d087e84040f84d9a951731d12633e3b5,

title = "The Navigation Metaphor in Security Economics",

abstract = "The navigation metaphor for cybersecurity merges security architecture models and security economics. By identifying the most efficient routes for gaining access to assets from an attacker's viewpoint, an organization can optimize its defenses along these routes. The well-understood concept of navigation makes it easier to motivate and explain security investment to a wide audience, encouraging strategic security decisions.",

keywords = "attack navigators, attacker profiles, cyberattacks, e-commerce, hackers, Internet/Web technologies, navigation, security, security economics, security models, visualization",

author = "Wolter Pieters and Jeroen Barendse and Margaret Ford and Claude Heath and Probst, {Christian W.} and Ruud Verbij",

year = "2016",

month = may,

day = "25",

doi = "10.1109/MSP.2016.47",

language = "English",

volume = "14",

pages = "14--21",

journal = "IEEE Security and Privacy Magazine",

issn = "1540-7993",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

number = "3",

}

TY - JOUR

T1 - The Navigation Metaphor in Security Economics

AU - Pieters, Wolter

AU - Barendse, Jeroen

AU - Ford, Margaret

AU - Heath, Claude

AU - Probst, Christian W.

AU - Verbij, Ruud

PY - 2016/5/25

Y1 - 2016/5/25

N2 - The navigation metaphor for cybersecurity merges security architecture models and security economics. By identifying the most efficient routes for gaining access to assets from an attacker's viewpoint, an organization can optimize its defenses along these routes. The well-understood concept of navigation makes it easier to motivate and explain security investment to a wide audience, encouraging strategic security decisions.

AB - The navigation metaphor for cybersecurity merges security architecture models and security economics. By identifying the most efficient routes for gaining access to assets from an attacker's viewpoint, an organization can optimize its defenses along these routes. The well-understood concept of navigation makes it easier to motivate and explain security investment to a wide audience, encouraging strategic security decisions.

KW - attack navigators

KW - attacker profiles

KW - cyberattacks

KW - e-commerce

KW - hackers

KW - Internet/Web technologies

KW - navigation

KW - security

KW - security economics

KW - security models

KW - visualization

UR - http://www.scopus.com/inward/record.url?scp=84973359544&partnerID=8YFLogxK

U2 - 10.1109/MSP.2016.47

DO - 10.1109/MSP.2016.47

M3 - Article

SN - 1540-7993

VL - 14

SP - 14

EP - 21

JO - IEEE Security and Privacy Magazine

JF - IEEE Security and Privacy Magazine

IS - 3

ER -

The Navigation Metaphor in Security Economics

Abstract

Keywords

Access to Document

Other files and links

Cite this