A curious example: the business case for anti-viruses
Wednesday, March 17, 2010
1:56 PM
The business case for anti-viruses
What business value does an anti-virus have? 
Risk: viral infection.
Impact/cost: denial of service or illicit use of business infrastructure (e.g., for bots).
Trial: time between virus outbreak and definition update. No such thing as no exposure. 
Can compute average arrival rate for viruses from history (see CERT statistics). 
Can compute average impact (e.g., desktops affected) per incident. 