Details
| Originalsprache | Englisch |
|---|---|
| Seiten (von - bis) | 753-800 |
| Seitenumfang | 48 |
| Fachzeitschrift | Journal of Risk and Insurance |
| Jahrgang | 91 |
| Ausgabenummer | 3 |
| Publikationsstatus | Veröffentlicht - 20 Aug. 2024 |
Abstract
Based on classical contagion models we introduce an artificial cyber lab: the digital twin of a complex cyber system in which possible cyber resilience measures may be implemented and tested. Using the lab, in numerical case studies, we identify two classes of measures to control systemic cyber risks: security- and topology-based interventions. We discuss the implications of our findings on selected real-world cybersecurity measures currently applied in the insurance and regulation practice or under discussion for future cyber risk control. To this end, we provide a brief overview of the current cybersecurity regulation and emphasize the role of insurance companies as private regulators. Moreover, from an insurance point of view, we provide first attempts to design systemic cyber risk obligations and to measure the systemic risk contribution of individual policyholders.
ASJC Scopus Sachgebiete
- Betriebswirtschaft, Management und Rechnungswesen (insg.)
- Bilanzierung
- Volkswirtschaftslehre, Ökonometrie und Finanzen (insg.)
- Finanzwesen
- Volkswirtschaftslehre, Ökonometrie und Finanzen (insg.)
- Volkswirtschaftslehre und Ökonometrie
Zitieren
- Standard
- Harvard
- Apa
- Vancouver
- BibTex
- RIS
in: Journal of Risk and Insurance, Jahrgang 91, Nr. 3, 20.08.2024, S. 753-800.
Publikation: Beitrag in Fachzeitschrift › Artikel › Forschung › Peer-Review
}
TY - JOUR
T1 - Building resilience in cybersecurity
T2 - An artificial lab approach
AU - Awiszus, Kerstin
AU - Bell, Yannick
AU - Lüttringhaus, Jan
AU - Svindland, Gregor
AU - Voß, Alexander
AU - Weber, Stefan
N1 - Publisher Copyright: © 2023 The Authors. Journal of Risk and Insurance published by Wiley Periodicals LLC on behalf of American Risk and Insurance Association.
PY - 2024/8/20
Y1 - 2024/8/20
N2 - Based on classical contagion models we introduce an artificial cyber lab: the digital twin of a complex cyber system in which possible cyber resilience measures may be implemented and tested. Using the lab, in numerical case studies, we identify two classes of measures to control systemic cyber risks: security- and topology-based interventions. We discuss the implications of our findings on selected real-world cybersecurity measures currently applied in the insurance and regulation practice or under discussion for future cyber risk control. To this end, we provide a brief overview of the current cybersecurity regulation and emphasize the role of insurance companies as private regulators. Moreover, from an insurance point of view, we provide first attempts to design systemic cyber risk obligations and to measure the systemic risk contribution of individual policyholders.
AB - Based on classical contagion models we introduce an artificial cyber lab: the digital twin of a complex cyber system in which possible cyber resilience measures may be implemented and tested. Using the lab, in numerical case studies, we identify two classes of measures to control systemic cyber risks: security- and topology-based interventions. We discuss the implications of our findings on selected real-world cybersecurity measures currently applied in the insurance and regulation practice or under discussion for future cyber risk control. To this end, we provide a brief overview of the current cybersecurity regulation and emphasize the role of insurance companies as private regulators. Moreover, from an insurance point of view, we provide first attempts to design systemic cyber risk obligations and to measure the systemic risk contribution of individual policyholders.
KW - complex systems
KW - complexity economics
KW - cyber insurance
KW - cyber resilience
KW - cybersecurity
KW - economics of networks
KW - systemic cyber risks
UR - http://www.scopus.com/inward/record.url?scp=85174275049&partnerID=8YFLogxK
U2 - 10.48550/arXiv.2211.04762
DO - 10.48550/arXiv.2211.04762
M3 - Article
AN - SCOPUS:85174275049
VL - 91
SP - 753
EP - 800
JO - Journal of Risk and Insurance
JF - Journal of Risk and Insurance
SN - 0022-4367
IS - 3
ER -