Towards an Optimal Information Security Investment Strategy | IEEE Conference Publication | IEEE Xplore