E-viri
Recenzirano
-
Paul, Jomon A.; Wang, Xinfang (Jocelyn)
Decision Support Systems, 07/2019, Letnik: 122Journal Article
This paper uses the concept of social cost, comprised of private and externality costs, to capture the time-elapsed economic value of losses inflicted on users of a service under cyberattack. Our approach offers a holistic treatment of cybersecurity that not only employs prevention as a first defense but also uses detection & containment safeguards to mitigate the damage of successful attacks. It examines the optimal balance between these two safeguards under three sources of uncertainty through a robust optimization model with the help of distribution-free ellipsoidal uncertainty sets to ease the challenge of providing exact estimates for uncertain input. Our method is more appropriate than stochastic programming and other competing RO methods in addressing cybersecurity parameter uncertainty. Tested on a case study, results from 25 deterministic scenarios first reveal a strong resource-allocation preference for the prevention safeguard, but when the budget constraint is relaxed, preference shifts toward the containment & detection safeguard. Results from 54 robust test instances indicate that, for the three sources of uncertainty, the adjusted effectiveness of the prevention safeguard has the greatest impact on both social cost and the optimal configuration of safeguards. Our analysis points to some serious flaws in the existing cybersecurity framework's reliance on prevention and provides decisionmakers with urgently needed guidelines. •Examine the optimal balance between prevention and detection & containment safeguards.•Resource-allocation preference shifts from prevention to detection & containment as budget constraints relax.•Among all uncertainties tested, the effectiveness of the prevention safeguard had the most impact.•Quantify the flaws in the current practice of mainly relying on prevention safeguard.
Vnos na polico
Trajna povezava
- URL:
Faktor vpliva
Dostop do baze podatkov JCR je dovoljen samo uporabnikom iz Slovenije. Vaš trenutni IP-naslov ni na seznamu dovoljenih za dostop, zato je potrebna avtentikacija z ustreznim računom AAI.
Leto | Faktor vpliva | Izdaja | Kategorija | Razvrstitev | ||||
---|---|---|---|---|---|---|---|---|
JCR | SNIP | JCR | SNIP | JCR | SNIP | JCR | SNIP |
Baze podatkov, v katerih je revija indeksirana
Ime baze podatkov | Področje | Leto |
---|
Povezave do osebnih bibliografij avtorjev | Povezave do podatkov o raziskovalcih v sistemu SICRIS |
---|
Vir: Osebne bibliografije
in: SICRIS
To gradivo vam je dostopno v celotnem besedilu. Če kljub temu želite naročiti gradivo, kliknite gumb Nadaljuj.