Search GSSD

Cybersecurity Strategies: The QuERIES Methodology

Abstract: 
Presents the Quantitative Evaluation of Risk for Investment Efficient Strategies (QuERIES) method of quantitative cybersecurity risk assessment. Currently employed by the U.S. Department of Defense (DoD) but has other applications. Proposes methodology for estimating probability of reverse engineering software. Applies economic theory to determine how much capital should be used to protect intellectual property (IP) using a variety of different algorithms. Also leverages some game theory. Initial testing shows a that QuERIES can significantly improve cybersecurity risk assessment.
Author: 
Lawrence Carin, George Cybenko, Jeff Hughes
Institution: 
Duke University, Dartmoth College, Air Force Research Laboratory
Year: 
2007
Input By: 
John Parsons
Affiliation: 
MIT
Industry Focus: 
Information & Telecommunication
Internet & Cyberspace
Country: 
United States
Datatype(s): 
Models