On metrics and prioritization of investments in hardware security

The security risks posed by electronics are numerous. There typically a variety of risk-reducing countermeasures for given system or across an enterprise. Each countermeasure is associated with both level risk reduction and its lifecycle costs. Given budgetary constraints, managers systems engineers must determine what combinations cost-effectively maximize reduction, metrics best guide the investment process. In this paper, we seek to answer these questions through exploration from field economics, including benefit/cost ratio, return on (ROSI), expected benefit information (EBIS), net (ENBIS). results suggest that ratio-based not strongly correlated while EBIS equivalent ENBIS equal minus cost.