@inproceedings{f9df3d670b4c46f2b6256d11674f91eb,
title = "IT security risk management under network effects and layered protection strategy",
abstract = "This paper considers the implications of network effects and distinction of security measures in the risk management procedure. We compare three models in the risk management procedure: without network effects and general protection measures, without network effects but with general protection, and with both network effects and general protection measures. The paper details the impact in terms of security risks, investment levels, and benefits of security investment, in the three models. We show that the preferable way to conduct risk management procedure is to follow the latter of the three models. {\textcopyright} Springer-Verlag Berlin Heidelberg 2004",
author = "Yue, \{Wei T.\} and Metin Cakanyildirim and Ryu, \{Young U.\} and Dengpan Liu",
year = "2004",
doi = "10.1007/978-3-540-25952-7\_25",
language = "English",
isbn = "978-3-540-22125-8",
series = "Lecture Notes in Computer Science",
publisher = "Springer ",
pages = "331--348",
editor = "Chen, \{Hsinchun \} and Moore, \{Reagan \} and Zeng, \{Daniel D. \}",
booktitle = "Intelligence and Security Informatics",
note = "2nd Symposium on Intelligence and Security Informatics (ISI 2004) ; Conference date: 10-06-2004 Through 11-06-2004",
}