mathematics

Gordon–Loeb model

Gordon–Loeb model is a mathematics topic covered in the lgStudy science library. This page brings together a partial reference excerpt, illustrations, worked examples, real-world applications and a short study plan, so you can understand Gordon–Loeb model rather than just read about it. In short: The Gordon–Loeb model is an economic model that analyzes the optimal level of investment in information security. The benefits of investing in cybersecurity stem from reducing the costs associated with cyber breaches.

Key takeaways

Gordon–Loeb model belongs to mathematics; place it in that map before memorising details.
Learn the definition first, then one example that makes the definition concrete.
Connect Gordon–Loeb model to a quantity you can measure, compute or draw — that is where exam questions come from.
Reproduce the core statement of Gordon–Loeb model from memory before moving on to harder problems.

Reference excerpt

The Gordon–Loeb model is an economic model that analyzes the optimal level of investment in information security. The benefits of investing in cybersecurity stem from reducing the costs associated with cyber breaches. The Gordon-Loeb model provides a framework for determining how much to invest in cybersecurity, using a cost-benefit approach. The model includes the following key components:

Organizational data vulnerable to cyber-attacks, with vulnerability denoted by v (0 ≤ v ≤ 1), representing the probability of a breach occurring under current conditions. The potential loss from a breach, represented by L, which can be expressed in monetary terms. The expected loss is calculated as vL before additional cybersecurity investments. Investment in cybersecurity, denoted as z, reduces v based on the effectiveness of the security measures, known as the security breach probability function. Gordon and Loeb demonstrated that the optimal level of security investment, z*, does not exceed 37% of the expected loss from a breach. Specifically, z* (v) ≤ (1/e) vL.

Overview

The model was first introduced by Lawrence A. Gordon and Martin P. Loeb in a 2002 paper published in ACM Transactions on Information and System Security, titled "The Economics of Information Security Investment". It was reprinted in the 2004 book Economics of Information Security. Both authors are professors at the University of Maryland's Robert H. Smith School of Business. The model is widely regarded as one of the leading analytical tools in cybersecurity economics. It has been extensively referenced in academic and industry literature. It has also been tested in various contexts by researchers such as Marc Lelarge and Yuliy Baryshnikov. The model has also been covered by mainstream media, including The Wall Street Journal and The Financial Times. Subsequent research has critiqued the model's assumptions, suggesting that some security breach functions may require fixing no less than 1/2 the expected loss, challenging the universality of the 1/e factor. Alternative formulations even propose that some loss functions may justify investment at the full estimated loss.

Illustrations

Worked examples

Example 1 — a first encounter with Gordon–Loeb model

Start with the simplest possible case. Write down what Gordon–Loeb model claims or describes in one sentence, then invent the smallest concrete situation in which that sentence is true. In mathematics, the smallest case is usually a single object, a single equation or a single measurement. Check that every symbol or term in your sentence has a meaning in that case.

Example 2 — changing one variable

Take the situation from Example 1 and change exactly one quantity: double it, halve it, or set it to zero. Predict what should happen to Gordon–Loeb model before you calculate. Comparing your prediction with the result is the fastest way to find out whether you understand the idea or only the words.

Example 3 — an exam-style question

Typical questions about Gordon–Loeb model ask you to (a) state it precisely, (b) apply it to given data, and (c) explain a limitation. Practise writing all three answers in under five minutes; the third part is what separates a full-mark answer from an average one.

Applications of Gordon–Loeb model

In research: Gordon–Loeb model appears in mathematics research whenever the underlying quantities have to be modelled precisely. Papers usually cite it as a starting assumption and then explore where it breaks down.
In technology and industry: Engineering practice reuses Gordon–Loeb model in design rules, simulations and safety margins. Knowing the idea lets you read a specification sheet and understand why the numbers look the way they do.
In the classroom: Gordon–Loeb model is common in secondary-school and first-year university syllabi. It links to neighbouring topics Data security, Mathematical economics, so understanding it makes those chapters shorter.
In everyday life: Look for Gordon–Loeb model outside the textbook — in sport, cooking, traffic, electronics or the sky above you. An example you found yourself is remembered far longer than one you were given.

Ask Teacher Smith questions about this articleOpens your AI tutor with a question about “Gordon–Loeb model” →

Affiliate

Preply — study more efficiently by working with a personal tutor. 50% off.

How to study Gordon–Loeb model in 20 minutes

Read the reference excerpt below once, without taking notes.
Close the page and write down what Gordon–Loeb model means in your own words.
Compare your version with the excerpt and mark what you missed.
Work through the three examples above with pen and paper.
Explain Gordon–Loeb model out loud to somebody else — or to Teacher Smith in the lgStudy chat.

Frequently asked questions

What is Gordon–Loeb model in simple terms?

Why does Gordon–Loeb model matter?

Because it connects several mathematics ideas at once: it gives you a definition you can apply, a quantity you can calculate, and a way to check whether a result is plausible.

How should I study Gordon–Loeb model?

Read the excerpt, restate it from memory, then work through the examples and applications listed on this page. The five-step study plan above takes about twenty minutes.

What does this page cover?

It gives you a compact reference excerpt plus original lgStudy explanations, examples, applications and study material on Gordon–Loeb model.