A simulation model of IS security

  • Authors:
  • Norman Pendegraft;Mark Rounds;D. Frincke

  • Affiliations:
  • University of Idaho, Moscow, ID;University of Idaho, Moscow, ID;University of Idaho, Moscow, ID

  • Venue:
  • Proceedings of the 43rd annual Southeast regional conference - Volume 2
  • Year:
  • 2005

Quantified Score

Hi-index 0.00

Visualization

Abstract

Determination of the actual value of security measures is an area currently undergoing scrutiny by many researchers. One method to determine this is to devise a simulation model that incorporates interactions between an information system, its users and a population of attackers. Initial simulation results suggest that the marginal value of additional security may be positive or negative as can the time rate of change of system value. Policy implications include the realization that IT security policy makers should be aware of their location in the state space before setting IT security policy.