Optimizing Investments in Security Countermeasures: A Practical Tool for Fixed Budgets
May 2013 • White Paper
Eric Hough, Hassan Osman, Jonathan Caulkins, Nancy R. Mead
In this paper, the authors introduce a novel method of optimizing using integer programming (IP).
Software engineers and businesses must make the difficult decision of how much of their budget to spend on software security mitigation for the applications and networks on which they depend. This article introduces a novel method of optimizing using integer programming (IP), the combination of security countermeasures to implement to maximize system security under fixed resources. The steps in the method and recent results with a case study client are described.