Research Catalog

Title

The defender's dilemma : charting a course toward cybersecurity / Martin C. Libicki, Lillian Ablon, Tim Webb.

Author

Libicki, Martin C.

Publication

• Santa Monica, Calif. : RAND, [2015]
• ©2015

Supplementary Content

http://www.rand.org/content/dam/rand/pubs/research_reports/RR1000/RR1024/RAND_RR1024.pdf

Items in the Library & Off-site

Details

Additional Authors

• Ablon, Lillian
• Webb, Tim (Engineer)

Description

xxv, 135 pages; 23 cm

Summary

Cybersecurity is a constant, and, by all accounts growing, challenge. Although software products are gradually becoming more secure and novel approaches to cybersecurity are being developed, hackers are becoming more adept, their tools are better, and their markets are flourishing. The rising tide of network intrusions has focused organizations' attention on how to protect themselves better. This report, the second in a multiphase study on the future of cybersecurity, reveals perspectives and perceptions from chief information security officers; examines the development of network defense measures, and the countermeasures that attackers create to subvert those measures; and explores the role of software vulnerabilities and inherent weaknesses. A heuristic model was developed to demonstrate the various cybersecurity levers that organizations can control, as well as exogenous factors that organizations cannot control. Among the report's findings were that cybersecurity experts are at least as focused on preserving their organizations' reputations as protecting actual property. Researchers also found that organizational size and software quality play significant roles in the strategies that defenders may adopt. Finally, those who secure networks will have to pay increasing attention to the role that smart devices might otherwise play in allowing hackers in. Organizations could benefit from better understanding their risk posture from various actors (threats), protection needs (vulnerabilities), and assets (impact). Policy recommendations include better defining the role of government, and exploring information sharing responsibilities.

Series Statement

[Research Report] ; RR-1024-JNI

Uniform Title

Research report (Rand Corporation) ; RR-1024-JNI.

Subject

• Computer networks > Security measures
• Computer networks > Security measures > Government policy > United States
• Industries > Security measures
• Computer networks > Security measures > Government policy
• United States

Bibliography (note)

• Includes bibliographical references (pages 127-135)

Contents

Introduction. -- Chief information security officers surveyed. -- The efficacy of security systems. -- Improving software. -- A heuristic cybersecurity model. -- Lessons for organizations and public policy. -- Appendixes. -- Bibliography.

Call Number

JBD 18-613

ISBN

• 9780833089113
• 0833089110

LCCN

2015024392

OCLC

910856222

Author

Libicki, Martin C., author.

Title

The defender's dilemma : charting a course toward cybersecurity / Martin C. Libicki, Lillian Ablon, Tim Webb.

Publisher

Santa Monica, Calif. : RAND, [2015]

Copyright Date

©2015

Type of Content

text

Type of Medium

unmediated

Type of Carrier

volume

Series

[Research Report] ; RR-1024-JNI

Research report (Rand Corporation) ; RR-1024-JNI.

Bibliography

Includes bibliographical references (pages 127-135)

Connect to:

http://www.rand.org/content/dam/rand/pubs/research_reports/RR1000/RR1024/RAND_RR1024.pdf

Added Author

Ablon, Lillian, author.

Webb, Tim (Engineer), author.

Other Form:

Online version: Libicki, Martin C., author. Defender's dilemma Santa Monica, CA : RAND, 2015 9780833091017 (DLC) 2015032164

Research Call Number

JBD 18-613