Security Economics or the Economics of Information Security addresses the economic aspects of privacy and computer security. Economics of information security includes models of the strictly rational “homo economicus” as well as behavioral economics. Economics of security addresses individual and organizational decisions and behaviors with respect to security and privacy as market decisions.
Economics of security addresses a core question: why do agents choose technical risks when there exists technical solutions to mitigate security and privacy risks? Economics addresses not only this question, but also inform design decisions in security engineering.
—Wikipedia, “Economics of security”
Ross Anderson’s book Security Engineering: A Guide to Building Dependable Distributed Systems, 3rd Ed. has a whole chapter devoted to “Economics,” (as in Security Economics) with a subsection on “The economics of security and dependability.” It makes for worthwhile reading.
We Have Root: Even More Advice from Schneier on Security By Bruce Schneier Published by John Wiley & Sons, Inc., September 2019. ISBN: 978-1-119-64301-2 “A collection of popular essays from security guru Bruce Schneier ” In his latest collection of …
We Have Root: Even More Advice from Schneier on Security Read More
Cambridge University professor Ross Anderson updates his classic textbook and teaches readers how to design, implement, and test systems to withstand both error and attack. The third edition brings it up to date for 2020. As people now go online from phones more than laptops, most servers are in the cloud, online advertising drives the Internet and social networks have taken over much human interaction, many patterns of crime and abuse are the same, but the methods have evolved. Ross Anderson explores what security engineering means in 2020.
Security Engineering: A Guide to Building Dependable Distributed Systems, 3rd Ed. Read More