How much is enough: a risk management approach to computer security

Aligning information security investments with a firm's risk tolerance

InfoSecCD '05 Proceedings of the 2nd annual conference on Information security curriculum development

Information security investment decisions: evaluating the Balanced Scorecard method

International Journal of Business Information Systems

On the limits of cyber-insurance

TrustBus'06 Proceedings of the Third international conference on Trust, Privacy, and Security in Digital Business

Predicting stock market returns from malicious attacks: A comparative analysis of vector autoregression and time-delayed neural networks

Decision Support Systems

Quantification, Optimization and Uncertainty Modeling in Information Security Risks: A Matrix-Based Approach

Information Resources Management Journal