SECAdvisor: a Tool for Cybersecurity Planning using Economic Models

Fuente: arXiv
Salvato in:
Dettagli Bibliografici
Autori principali: Franco, Muriel Figueredo, Omlin, Christian, Kamer, Oliver, Scheid, Eder John, Stiller, Burkhard
Natura: Preprint
Pubblicazione: 2023
Soggetti:
Accesso online:
Tags: Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
_version_ 1866908966984876032
author Franco, Muriel Figueredo
Omlin, Christian
Kamer, Oliver
Scheid, Eder John
Stiller, Burkhard
author_facet Franco, Muriel Figueredo
Omlin, Christian
Kamer, Oliver
Scheid, Eder John
Stiller, Burkhard
contents Cybersecurity planning is challenging for digitized companies that want adequate protection without overspending money. Currently, the lack of investments and perverse economic incentives are the root cause of cyberattacks, which results in several economic impacts on companies worldwide. Therefore, cybersecurity planning has to consider technical and economic dimensions to help companies achieve a better cybersecurity strategy. This article introduces SECAdvisor, a tool to support cybersecurity planning using economic models. SECAdvisor allows to (a) understand the risks and valuation of different businesses' information, (b) calculate the optimal investment in cybersecurity for a company, (c) receive a recommendation of protections based on the budget available and demands, and (d) compare protection solutions in terms of cost-efficiency. Furthermore, evaluations on usability and real-world training activities performed using SECAdvisor are discussed.
format Preprint
id arxiv_https___arxiv_org_abs_2304_07909
institution arXiv
publishDate 2023
record_format arxiv
spellingShingle SECAdvisor: a Tool for Cybersecurity Planning using Economic Models
Franco, Muriel Figueredo
Omlin, Christian
Kamer, Oliver
Scheid, Eder John
Stiller, Burkhard
Cryptography and Security
Computers and Society
Cybersecurity planning is challenging for digitized companies that want adequate protection without overspending money. Currently, the lack of investments and perverse economic incentives are the root cause of cyberattacks, which results in several economic impacts on companies worldwide. Therefore, cybersecurity planning has to consider technical and economic dimensions to help companies achieve a better cybersecurity strategy. This article introduces SECAdvisor, a tool to support cybersecurity planning using economic models. SECAdvisor allows to (a) understand the risks and valuation of different businesses' information, (b) calculate the optimal investment in cybersecurity for a company, (c) receive a recommendation of protections based on the budget available and demands, and (d) compare protection solutions in terms of cost-efficiency. Furthermore, evaluations on usability and real-world training activities performed using SECAdvisor are discussed.
title SECAdvisor: a Tool for Cybersecurity Planning using Economic Models
topic Cryptography and Security
Computers and Society
url https://arxiv.org/abs/2304.07909