Covert conflict in social networks

Last summer Ross Anderson and myself published a technical report titled “the topology of covert conflict” with preliminary results on attacks and defences in complex networks. We explored various tactical and strategic options available to combatants involved in conflict. The paper has now been accepted for publication at WEIS 2006. This work has also been … Continue reading Covert conflict in social networks

Towards a market price for insecurity

There’s been a certain amount of research into the value of security holes in the past few years (for a starter bibliography see the “Economics of vulnerabilities” section on Ross Anderson’s “Economics and Security Resource Page”). Both TippingPoint and iDefense who currently run vulnerability markets for zero day exploits are somewhat coy about saying what … Continue reading Towards a market price for insecurity