The economics of information security

Tuesday, 20 April 2004, 2:53 AM EST

As any victim of a significant information security attack will tell you, there's a financial dimension to cybercrime. And those companies intent on not being victimized must pay a hefty price, too: Security measures are costly, and so are the salaries of the IT professionals who manage them.

Unfortunately, relatively little attention has been paid to economics, and to the applied financial practices that grow out of economics, when it comes to information security. In 2003, the annual CSI/FBI Computer Crime and Security Survey reported average losses per respondent of about $800,000. In fact, the real headline should be that even those loss totals don't do justice to the magnitude of information security crime and related costs. (See "The True Cost of Cybercrime" for economist Martin P. Loeb's reckoning of indirect costs and their impact.)

By Lawrence A. Gordon and Robert Richardson at Security Pipeline.

[ Read more ]




Spotlight

Black hole routing: Not a silver bullet for DDoS protection

As ISPs, hosting providers and online enterprises around the world continue suffering the effects of DDoS attacks, often the discussions that follow are, “What is the best way to defend our networks and our customers against an attack?”


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  
DON'T
MISS

Mon, Mar 2nd
    COPYRIGHT 1998-2015 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //