While I can't give you a fixed cost, I can confidently say
that the value or cost/benefit over time resembled
a bathtub curve. It starts
high, drops sharply close to zero, then climbs slowly over time as the
infection
rate dissipates while a fixed
mitigation strategy is applied, with diminishing results.
For blaster/nachi, we are starting to encounter side effects
of the filters put in place, which is slowly
incurring support costs as exceptions are made.
--
Jamie.Reid, CISSP,
jamie.reid@mbs.gov.on.caSenior
Security Specialist, Information Protection Centre
Corporate Security,
MBS
416 327 2324
>>> <sgorman1@gmu.edu> 11/13/03
09:35am >>>
I was hoping to get some estimates from folks on
the costs of defending networks from various worm attacks. It is a pretty
wide open question, but if anyone has some rough estimates of what it costs per
edge, manpower vs. equipment costs, or any combination thereof it would be of
great assistance. We are doing some simulations of attack and defense
strategies and looking for some good metrics to plug into a cost benefit
model. We'd be happy to share the results if anyone is interested as
well.
Thanks in advance,
sean