The paper, called “Economics of Information Security Investment in the Case of Simultaneous Attacks” breaks threats into two categories: distributed attacks, which come in the form of virus, spyware and spam, and targeted attacks from a hacker, said professor Qing Hu.
“No matter how much they spend on security, the budget is always low relative to the potential loss,” Huang said.
Targeted attacks have generally been shown to cause more financial damage than distributed attacks.
For enterprises, “we’ve gone past the time when people just attacked us as a game,” Behara said.
Huang and Hu will present the paper at the University of Cambridge during the Workshop on the Economics of Information Security, which runs from June 26 to June 28.
http://infoworld.com/article/06/05/19/78509_HNholesinapproach_1.html