TY - GEN
T1 - Maximizing return on security safeguard investment with constraint satisfaction
AU - Lee, Taek
AU - Kim, Dohoon
AU - In, Hoh Peter
PY - 2008
Y1 - 2008
N2 - Security development project planning is a tricky task because a security manager is not sure about what combination of effective safeguards should be implemented to prevent threats from occurring and damaging future business continuity. Such the decision making problem is necessarily accompanied with investment constraints (e.g. limited budget, positive return requirement, implementation advices). Thus, it is not easy to justify a security investment plan having the several constraints. In this paper, we model the constraints and formulate the decision making problem to find the best solution by using Integer Programming.
AB - Security development project planning is a tricky task because a security manager is not sure about what combination of effective safeguards should be implemented to prevent threats from occurring and damaging future business continuity. Such the decision making problem is necessarily accompanied with investment constraints (e.g. limited budget, positive return requirement, implementation advices). Thus, it is not easy to justify a security investment plan having the several constraints. In this paper, we model the constraints and formulate the decision making problem to find the best solution by using Integer Programming.
UR - http://www.scopus.com/inward/record.url?scp=51349121917&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=51349121917&partnerID=8YFLogxK
U2 - 10.1109/ISA.2008.59
DO - 10.1109/ISA.2008.59
M3 - Conference contribution
AN - SCOPUS:51349121917
SN - 9780769531267
T3 - Proceedings of the 2nd International Conference on Information Security and Assurance, ISA 2008
SP - 172
EP - 175
BT - Proceedings of the 2nd International Conference on Information Security and Assurance, ISA 2008
T2 - 2nd International Conference on Information Security and Assurance, ISA 2008
Y2 - 24 April 2008 through 26 April 2008
ER -