@inbook{9b89e6ae65594832b9384d2ddc9b1ecf,
title = "Fair-based loss measurement model for enterprise personal information breach",
abstract = "Loss measurement for personal information breach incidents can be used as a basis for decision making for information security investments. In this vein, reasonable loss measurement is important in determining information security policies. However, the previous research is focused on estimating the amount of loss which is incurred after incidents. In order to be base data for decision making, loss measurement should include incident-causing-factors before incidents occur. In this paper, we propose a loss measurement model based on an improved FAIR (Factor Analysis of Information Risk) risk analysis methodology. Additionally, we verify the effectiveness of the proposed model by applying it to a large scale personal information leakage case.",
keywords = "Loss measurement model, Personal information breach, Security policy",
author = "Yun, {Jang Ho} and Cho, {In Hyun} and Lee, {Kyung Ho}",
note = "Publisher Copyright: {\textcopyright} Springer Science+Business Media Singapore 2015.",
year = "2015",
doi = "10.1007/978-981-10-0281-6_116",
language = "English",
series = "Lecture Notes in Electrical Engineering",
publisher = "Springer Verlag",
pages = "825--833",
booktitle = "Lecture Notes in Electrical Engineering",
}