| Strengthening DoD Cyber Security with the Vulnerability Market Contributor(s): Air Force Institute of Technology (Author) |
|
 |
ISBN: 1500750158 ISBN-13: 9781500750152 Publisher: Createspace Independent Publishing Platform OUR PRICE: $14.20 Product Type: Paperback Published: August 2014 |
| Additional Information |
| BISAC Categories: - Political Science | Security (national & International) |
| Physical Information: 0.14" H x 8.5" W x 11.02" (0.41 lbs) 70 pages |
| Descriptions, Reviews, Etc. |
| Publisher Description: Every year, the DoD upgrades its information technology systems, allows new applications to connect to the network, and reconfigures the Enterprise to gain efficiencies. While these actions are to better support the warfighter and satisfy national security interests, they introduce new system vulnerabilities waiting to be exploited. Often, these vulnerabilities are discovered after the system has already deployed and where costs to fix are much larger. This paper recommends the DoD adopt an Information Assurance tactic to limit these costs, called the vulnerability market. Through use of the vulnerability market, DoD will ensure information security is built into the application, minimize the number of distributed patches, and optimize investment in defense programs.Using empirical data, it was shown that vulnerability disclosure phases vary significantly (3-10) years based on market share. Using Adobe Acrobat, a case was made that investing early in a 25% vulnerability disclosure rate could save over 25% cumulative lifecycle costs due to vulnerability remediation actions. |