Lookup NU author(s): Wen Zeng,
Professor Maciej Koutny
Full text for this publication is not currently held within this repository. Alternative links are provided below where available.
Although Digital RightsManagement (DRM) has been proven effective and successful in protecting the con dentiality of sensitive documents by providing access control, DRM products have not been widely adopted and used to their potential. One reason for this could be that cost and benefit of these products have not been analyzed in a systematic and quantitative manner to date. As a result, companies do not have an established procedure to evaluate the cost and benefit of implementing these products. In this document, the benefits of implementing DRM products in enterprises are quantfied using stochastic Petri-net models and are compared with the security needs of a corporation and potential costs incurred by the implementation process. An evaluating procedure for implementing DRM products is established. This procedure has the potential to be used to improve the ability of a corporation to make sensible security investment decisions. The implementation of MS IRM (Microsoft Information Rights Management), one of the DRM products, was studied as a type case. In this case study, the MS IRM system was analyzed; a group of security metrics were developed for measuring and evaluating the effectiveness of the MS IRM system, in terms of increased security provided. Stochastic models are a core part of the process. It was found that the business process is a critical factor in determining document security. Although DRM products improve security, they typically increase the cost to the company and potentially reduce the productivity of sta. Therefore, for a successful deployment of the DRM system, it is recommended that a company evaluate the bene t and cost of DRM systems quantitatively using the procedures described in this document.
Author(s): Zeng W, Liu K, Koutny M
Editor(s): Eric S. Imsand, Shaoen Wu and Qishi Wu
Publication type: Conference Proceedings (inc. Abstract)
Publication status: Published
Conference Name: 46th Annual Simulation Symposium
Year of Conference: 2013
Library holdings: Search Newcastle University Library for this item