Re: Cost of Worm Attack Protection

["Jamie Reid" <Jamie.Reid () mbs gov on ca>]

While I can't give you a fixed cost, I can confidently say that the value or cost/benefit over time resembled 
a bathtub curve. It starts high, drops sharply close to zero, then climbs slowly over time as the infection 
rate dissipates while a fixed mitigation strategy is applied, with diminishing results. 

For blaster/nachi, we are starting to encounter side effects of the filters put in place, which is slowly
incurring support costs as exceptions are made.  



--
Jamie.Reid, CISSP, jamie.reid () mbs gov on ca
Senior Security Specialist, Information Protection Centre 
Corporate Security, MBS  
416 327 2324 
> > > <sgorman1 () gmu edu> 11/13/03 09:35am >>>


I was hoping to get some estimates from folks on the costs of defending networks from various worm attacks.  It is a 
pretty wide open question, but if anyone has some rough estimates of what it costs per edge, manpower vs. equipment 
costs, or any combination thereof it would be of great assistance.  We are doing some simulations of attack and defense 
strategies and looking for some good metrics to plug into a cost benefit model.  We'd be happy to share the results if 
anyone is interested as well.

Thanks in advance,

sean

Attachment: TEXT.htm
Description: