Anderson why information security is hard

Information security is achievable by striking the right balance between the technology and the economics and analyzing the interrelationship between information security countermeasures and economics. Information Security Checkpoint.

Search this site. Live CD. Live CD Distribution Survey. Live CD: Security Features. NIST DOI: Given better access control policy models, formal proofs of cryptographic protocols, approved firewalls, better ways of detecting intrusions and malicious code, and better tools for system evaluation and assurance, the problems can be solved.

The author puts forward a contrary view: information insecurity is at least as much due to perverse incentives. Many of the problems can be explained more clearly and… Expand. View on IEEE. Save to Library Save. Create Alert Alert. Share This Paper. Background Citations.

Methods Citations. Results Citations. Topics from this paper. Information security Moral hazard Malware. Access control Cryptographic protocol Sensor. This further emphasizes the motive for attack rather than defense. Finally — and this appears to be less widely realized — the balance in favor of attack rather than defense is still more pronounced in smaller countries.

They have proportionally fewer citizens to defend, and more foreigners to attack. Ross Anderson's home page. From Cybersecurity Wiki. Navigation menu Personal tools Log in. Namespaces Page Discussion. Views Read View source View history. Samuelson, P. Yale Law Journal Google Scholar. Lookabaugh, T. Cable Industry. Advances in Information Security, vol. Kluwer, Dordrecht Google Scholar. Oberholzer, F. Cambridge, MA Google Scholar. Cobb, S. Frieder, L. Berkman Center Research Publication No.

Akella, A. Koutsoupias, E. In: 16th STOC. Springer LNCS, vol. Roughgarden, T. Fabrikant, A. In: 22nd PODC, pp. Anshelevich, E. In: 35th STOC, pp.

In: 45th FOCS, pp. In: 23rd PODC, pp. Aspnes, J. Dwork, C. In: Crypto 92, pp. Google Scholar. Laurie, B. Serjantov, A. Feldman, M. Dellarocas, C. Landwehr, C. Wiley, Chichester Google Scholar.