Effect of security investment strategy on the business value of managed security service providers

作者:

Highlights:

• The study develops a model to address the security investment strategy for an MSSP.

• Prevention investment plays the most significant role in protecting clients.

• The investments on opportunistic attack are more efficient than on targeted attack.

• Sensitivity analysis shows the robustness of the model.

摘要

•The study develops a model to address the security investment strategy for an MSSP.•Prevention investment plays the most significant role in protecting clients.•The investments on opportunistic attack are more efficient than on targeted attack.•Sensitivity analysis shows the robustness of the model.

论文关键词:Managed security service,Security investment,Business value,System dynamics

论文评审过程:Received 10 May 2018, Revised 15 March 2019, Accepted 26 March 2019, Available online 27 March 2019, Version of Record 4 April 2019.

论文官网地址:https://doi.org/10.1016/j.elerap.2019.100843