«interdependent security»
۱۰۶۶ نتیجهManaging Interdependent Information Security Risks: Cyberinsurance, Managed Security Services, and Risk Pooling Arrangements
The interdependency of information security risks often induces firms to invest inefficiently in information technology security management. Cyberinsurance has been proposed as a promising solution to help firms optimize security spending. However, cyberinsurance is ineffective i
Quantification, Optimization and Uncertainty Modeling in Information Security Risks: A Matrix-Based Approach
In this article, the authors present a quantitative model for estimating security risk exposure for a firm. The model includes a formulation for the optimization of controls as well as determining sensitivity of the exposure of assets to different threats. The model uses a series
Managing Interdependent Information Security Risks: A Study of Cyberinsurance, Managed Security Service and Risk Pooling
The interdependency of information security risks poses a significant challenge for firms to manage security. Firms may overor under-invest in security because security investments generate network externalities. In this paper, we explore how firms can use three risk management a
Analyzing security risks in critical infrastructures embedded in systems of systems: How to capture the impact of interdependencies
Our economy and national well-being is highly dependent on Critical Infrastructures (CIs). Today, CIs rely heavily on ICT and are often embedded within systems of systems. This makes CIs particularly vulnerable to security threats. In this paper we address the methodological chal
A A Survey of Interdependent Information Security Games
Information security has traditionally been considered a strategic cat-and-mouse game between the defending party and “the attacker”. The goal of the attacker has been to compromise the defender’s systems and to profit from this unauthorized access, while the goal of the defender
A hybrid information security risk assessment procedure considering interdependences between controls
Risk assessment is the core process of information security risk management. Organizations use risk assessment to determine the risks within an information system and provide sufficient means to reduce these risks. In this paper, a hybrid procedure for evaluating risk levels of i
Security Interdependencies for Networked Control Systems with Identical Agents
This paper studies the security choices of identical plantcontroller systems, when their security is interdependent due the exposure to network induced risks. Each plant ismodeled by a discrete-time stochastic linear system, which is sensed and controlled over a communication net
A Process for the Identification of Security Risks from Critical Infrastructure Interdependencies
Traditional security risk assessment takes a broad asset-based view of organizations. The risk identification process therefore focuses on well-known threats and vulnerabilities to static and discrete assets that fall within the scope of organizational boundaries under investigat
A Tale of Two Mechanisms: Incentivizing Investments in Security Games
In a system of interdependent users, the security of an entity is affected not only by that user’s investment in security measures, but also by the positive externality of the security decisions of (some of) the other users. The provision of security in such system is therefore m
Colonel Blotto Game for Secure State Estimation in Interdependent Critical Infrastructure
Securing the physical components of a city’s interdependent critical infrastructure (ICI) such as power, natural gas, and water systems is a challenging task due to their interdependence and large number of involved sensors. Using a novel integrated state-space model that capture