A Cost-Benefit Approach to Risk Analysis : Merging Analytical Hierarchy Process with Game Theory

Abstract: In this study cost-benefits problems concerning the knapsack problem of limited resources is studied and how this relates to an attacker perspective when choosing defense strategies. This is accomplished by adopting a cost-benefit method and merging it with game theory. The cost-benefit method chosen for this study is the Analytical Hierarchy Process and from the field of game theory the Bayesian Nash Equilibrium is used. The Analytical Hierarchy Process allows the user to determine internally comparable weights between elements, and to bring in a security dimension to the Analytical Hierarchy Process a sub category consisting of confidentiality, integrity and availability is used. To determine the attacker strategy and, in effect, determine the best defense strategy the Bayesian Nash Equilibrium is used.