A Layered Decision Model for Cost-Effective System Security
System security involves decisions in at least three areas: identification of well-defined security policies, selection of cost-effective defence strategies, and implementation of real-time defence tactics. Although choices made in each of these areas affect the others, existing decision models typically handle these three decision areas in isolation. There is no comprehensive tool that can integrate them to provide a single efficient model for safeguarding a network. In addition, there is no clear way to determine which particular combinations of defence decisions result in cost-effective solutions. To address these problems, this paper introduces a Layered Decision Model (LDM) for use in deciding how to address defence decisions based on their cost-effectiveness. To validate the LDM and illustrate how it is used, we used simulation to test model rationality and applied the LDM to the design of system security for an e-commercial business case.
- Research Organization:
- Pacific Northwest National Lab. (PNNL), Richland, WA (United States)
- Sponsoring Organization:
- USDOE
- DOE Contract Number:
- AC05-76RL01830
- OSTI ID:
- 974998
- Report Number(s):
- PNNL-SA-61549; TRN: US201007%%935
- Journal Information:
- International Journal of Information and Computer Security, 2(3):297-324, Vol. 2, Issue 3
- Country of Publication:
- United States
- Language:
- English
Similar Records
Rationality Validation of a Layered Decision Model for Network Defense
Lawrence Livermore National Security Cost Model Functional Management Assessment