The Navigation Metaphor in Security Economics

Wolter Pieters; Jeroen Barendse; Margaret Ford; Claude P R Heath; Christian W. Probst; Ruud Verbij

doi:10.1109/MSP.2016.47

The Navigation Metaphor in Security Economics

Wolter Pieters, Jeroen Barendse, Margaret Ford, Claude P R Heath, Christian W. Probst, Ruud Verbij

Safety and Security Science

Research output: Contribution to journal › Article › Scientific › peer-review

4 Citations (Scopus)

66 Downloads (Pure)

Abstract

The navigation metaphor for cybersecurity merges security architecture models and security economics. By identifying the most efficient routes for gaining access to assets from an attacker's viewpoint, an organization can optimize its defenses along these routes. The well-understood concept of navigation makes it easier to motivate and explain security investment to a wide audience, encouraging strategic security decisions.

Original language	English
Article number	7478534
Pages (from-to)	14-21
Number of pages	8
Journal	IEEE Security & Privacy Magazine: building confidence in a networked world
Volume	14
Issue number	3
DOIs	https://doi.org/10.1109/MSP.2016.47
Publication status	Published - 2016

Keywords

attack navigators
attacker profiles
cyberattacks
e-commerce
hackers
Internet/Web technologies
navigation
security
security economics
security models
visualization

Access to Document

10.1109/MSP.2016.47

SP_SPSI-2015-01-0016.R2_PietersAccepted author manuscript, 374 KB

Cite this

@article{60b751667de849c4be2a9ddd1f956945,

title = "The Navigation Metaphor in Security Economics",

abstract = "The navigation metaphor for cybersecurity merges security architecture models and security economics. By identifying the most efficient routes for gaining access to assets from an attacker's viewpoint, an organization can optimize its defenses along these routes. The well-understood concept of navigation makes it easier to motivate and explain security investment to a wide audience, encouraging strategic security decisions.",

keywords = "attack navigators, attacker profiles, cyberattacks, e-commerce, hackers, Internet/Web technologies, navigation, security, security economics, security models, visualization",

author = "Wolter Pieters and Jeroen Barendse and Margaret Ford and Heath, {Claude P R} and Probst, {Christian W.} and Ruud Verbij",

year = "2016",

doi = "10.1109/MSP.2016.47",

language = "English",

volume = "14",

pages = "14--21",

journal = "IEEE Security & Privacy Magazine: building confidence in a networked world",

issn = "1540-7993",

publisher = "Institute of Electrical and Electronics Engineers (IEEE)",

number = "3",

}

TY - JOUR

T1 - The Navigation Metaphor in Security Economics

AU - Pieters, Wolter

AU - Barendse, Jeroen

AU - Ford, Margaret

AU - Heath, Claude P R

AU - Probst, Christian W.

AU - Verbij, Ruud

PY - 2016

Y1 - 2016

N2 - The navigation metaphor for cybersecurity merges security architecture models and security economics. By identifying the most efficient routes for gaining access to assets from an attacker's viewpoint, an organization can optimize its defenses along these routes. The well-understood concept of navigation makes it easier to motivate and explain security investment to a wide audience, encouraging strategic security decisions.

AB - The navigation metaphor for cybersecurity merges security architecture models and security economics. By identifying the most efficient routes for gaining access to assets from an attacker's viewpoint, an organization can optimize its defenses along these routes. The well-understood concept of navigation makes it easier to motivate and explain security investment to a wide audience, encouraging strategic security decisions.

KW - attack navigators

KW - attacker profiles

KW - cyberattacks

KW - e-commerce

KW - hackers

KW - Internet/Web technologies

KW - navigation

KW - security

KW - security economics

KW - security models

KW - visualization

UR - http://resolver.tudelft.nl/uuid:60b75166-7de8-49c4-be2a-9ddd1f956945

UR - http://www.scopus.com/inward/record.url?scp=84973359544&partnerID=8YFLogxK

U2 - 10.1109/MSP.2016.47

DO - 10.1109/MSP.2016.47

M3 - Article

AN - SCOPUS:84973359544

SN - 1540-7993

VL - 14

SP - 14

EP - 21

JO - IEEE Security & Privacy Magazine: building confidence in a networked world

JF - IEEE Security & Privacy Magazine: building confidence in a networked world

IS - 3

M1 - 7478534

ER -

The Navigation Metaphor in Security Economics

Abstract

Keywords

Access to Document

Other files and links

Fingerprint

Cybersecurity (TPM)

Cite this

The Navigation Metaphor in Security Economics

Abstract

Keywords

Access to Document

Other files and links

Fingerprint

Projects

Cybersecurity (TPM)

Cite this