The economics of ransomware attacks on integrated supply chain networks

We explore the economics of ransomware on production supply chains. Integrated chains result in a mutual-dependence between firms that can be exploited by cyber-criminals. For instance, we show targeting one firm network criminals potentially hold multiple to ransom. Overlapping security systems may also allow strike at weak points network. it optimal for attacker target supplier order ransom large producer heart introduce game theoretic model an attack chain and solve two types Nash equilibria. then study hub spoke example before providing simulation results general case. find total demand is increasing average path length Thus, lowest highest line Mitigation strategies are discussed.