The Navigation Metaphor in Security Economics
Wolter Pieters (TU Delft - Technology, Policy and Management)
Jeroen Barendse (LUST)
Margaret Ford (Consult Hyperion)
Claude P R Heath (Royal Holloway University of London)
Christian W. Probst (Technical University of Denmark (DTU))
Ruud Verbij (KPMG Netherlands)
More Info
expand_more
Other than for strictly personal use, it is not permitted to download, forward or distribute the text or part of it, without the consent of the author(s) and/or copyright holder(s), unless the work is under an open content license such as Creative Commons.
Abstract
The navigation metaphor for cybersecurity merges security architecture models and security economics. By identifying the most efficient routes for gaining access to assets from an attacker's viewpoint, an organization can optimize its defenses along these routes. The well-understood concept of navigation makes it easier to motivate and explain security investment to a wide audience, encouraging strategic security decisions.