Article citationsMore>>

Schechter, S.E. and Smith, M.D. (2003) How Much Security Is Enough to Stop A Thief? International Conference on Financial Cryptography, Guadeloupe, 27-30 January 2003, 122-137.
https://doi.org/10.1007/978-3-540-45126-6_9

has been cited by the following article:

• TITLE: Information Segmentation and Investing in Cybersecurity

  AUTHORS: Lawrence A. Gordon, Martin P. Loeb, Lei Zhou

  KEYWORDS: Cybersecurity Investments, Information Segmentation, Economics of Information Security

  JOURNAL NAME: Journal of Information Security, Vol.12 No.1, January 19, 2021

  ABSTRACT: This paper provides an analysis of how the benefits of information segmentation can assist an organization to derive the appropriate amount to invest in cybersecurity from a cost-benefit perspective. An analytical model based on the framework of the Gordon-Loeb Model ([1]) is presented that provides a set of sufficient conditions for information segmentation to lower the total investments in cybersecurity and the expected loss from cybersecurity breaches. A numerical example illustrating the insights gained from the model is also presented.