o Code Analysis and Development
o Database Security & Information Management
o Network & Wireless Security
o Policy & Management

Policy & Management

Our current research on economic aspects of information security addresses issues related to the following five concerns: (1) How much should an organization invest in information security, what is the most appropriate way to "make the business case" for such investments, and how should such investments be allocated to various security projects? (2) What is the true economic cost of information security breaches? (3) How is economic welfare associated with the sharing of information by a government-corporate-academic partnership and what role can the government play in facilitating private initiatives to enhance information security activities? (4) How does information security auditing enhance the value of an organization? (5) How does disclosure of information security activities within a given industry (e.g., the telecommunications industry) affect the value of an organization?

Public policy research at CHESS focuses in the area of the relationahsips between the pblic sector and private industry.