Securing Our Data Storage Infrastructures

The threats faced by data storage infrastructures can be broadly categorized into two classes – breakins and data loss. Unfortunately, defenses against breakins tend to increase the risk of data loss, and vice versa. We introduce configurations as a model for quantifying and managing the break-in and data loss risks faced by a secure data storage system. Configurations can also be used in making technology investment decisions within the Gordon-Loeb framework.