Abstract: A computer implemented method monetizes the security of a cyber-system in terms of losses each stakeholder may expect to lose if a security break down occurs. A non-transitory media stores instructions for generating a stake structure that includes costs that each stakeholder of a system would lose if the system failed to meet security requirements and generating a requirement structure that includes probabilities of failing requirements when computer components fails. The system generates a vulnerability model that includes probabilities of a component failing given threats materializing and generates a perpetrator model that includes probabilities of threats materializing. The system generates a dot product of the stakes structure, the requirement structure, the vulnerability model and the perpetrator model. The system can further be used to compare, contrast and evaluate alternative courses of actions best suited for the stakeholders and their requirements.

Abstract: A device of implementing an econometrics-based control system. The device includes a processor, a memory in communication with the processor and configured to store processor implementable instructions. The processor implementable instructions are programmed to correlate a plurality of system requirements with each of a plurality of system stakeholders, identify a stake relating to each of the plurality of system stakeholders and the correlated plurality of system requirements such that the stake is identified by each of the plurality of system stakeholders, determining a mean failure cost as a function of the identified stake and a failure probability, and analyzing the mean failure cost to determine a control strategy. The device may further comprise a communication component in communication with the processor and the memory, the communication component configured to communicate the control strategy to a component operable within the control system such that the component implements the control strategy.