Balancing cybersecurity in a supply chain under direct and indirect cyber risks
Balancing cybersecurity in a supply chain under direct and indirect cyber risks
复制标题
在直接和间接网络风险下平衡供应链中的网络安全
DOI：
--
复制
发表时间：
2021
影响因子：
9.2
通讯作者：
T. Sawik
中科院分区：
文献类型：
--
作者：
T. Sawik
网络安全是全球供应链可持续性的基本要求。本文提出了一个随机规划公式，用于优化网络安全投资和安全控制措施的选择，以缓解和平衡多层供应链中直接和间接(传播)的网络风险的影响。利用网络变换结合自然对数的一阶Taylor级数逼近对非线性约束进行线性化，将非线性随机组合优化模型近似为其线性等价模型。问题的目标是在有限的预算和每个供应链节点的安全控制组合下确定最优的网络安全投资，以平衡整个供应链的网络安全。最小最大目标函数用于最小化供应链节点的最大违约概率或最大损失。或者，最大最小目标用于最大化最小的无违约概率或最小的损失节省。用计算研究结果说明了所提出的集成建模方法，并给出了近似解与精确解的比较。提供并讨论了决策洞察力。
Cybersecurity is an essential requirement for the sustainability of global supply chains. In this paper, a stochastic programming formulation is presented for optimisation of cybersecurity investment and selection of security controls to mitigate and balance the impact of direct and indirect (propagated) cyber risks in a multi-tier supply chain. Using a network transformation combined with the first-order Taylor series approximation of natural logarithm to linearise the nonlinear constraints, a nonlinear stochastic combinatorial optimisation model is approximated by its linear equivalent. The problem objective is to determine an optimal cybersecurity investment under limited budget and portfolio of security controls for each supply chain node to balance the cybersecurity over the entire supply chain. The minmax objective functions are applied to minimise either the maximum breach probability or the maximum loss of supply chain nodes. Alternatively, maxmin objectives are used to maximise either the minimum non-breach probability or the minimum saving of loss. The proposed integrated modelling approach is illustrated with results of computational study and a comparison of approximated and exact solution values is presented. The decision-making insights are provided and discussed.
DOI：
10.1016/j.ejor.2019.04.035
发表时间：
2019-11
期刊：
Eur. J. Oper. Res.
影响因子：
--
作者：
M. Khouzani;Zheng-Long Liu;P. Malacaria
通讯作者：
M. Khouzani;Zheng-Long Liu;P. Malacaria