Sustainable Catastrophic Cyber-Risk Management in IoT Societies
Sustainable Catastrophic Cyber-Risk Management in IoT Societies
复制标题
物联网社会中可持续的灾难性网络风险管理
DOI：
--
复制
发表时间：
2020
期刊：
影响因子：
--
通讯作者：
Jon Crowcroft
中科院分区：
文献类型：
--
作者：
Ranjan Pal;Ziyuan Huang;Xinlong Yin;Mingyan Liu;S. Lototsky;Jon Crowcroft
物联网驱动的智慧城市是流行的服务网络化生态系统，其正常运作在很大程度上取决于数字安全可靠的供应链关系。然而，目前有关各方在保护物联网设备方面的安全努力过于幼稚，给物联网社会的可扩展和不断扩大的网络风险管理市场带来了严峻挑战，并引发了系统性的网络灾难。随着越来越多的公司转向网络保险来进行可靠的风险管理，保险公司转向再保险来进行自己的风险管理，现代网络风险是如何聚集和积累的，以及再保险是否是智能城市中可靠的灾难性风险管理和转移的可行模式。在这篇介绍性的文章中，我们分析了(a)传统的网络风险扩散是否是一种可持续的风险管理实践，以及(b)在相当保守的情况下，当网络风险管理者汇总了具有重大重尾性质的i.i.d灾难性网络风险的比例时，在什么条件下。
IoT-driven smart cities are popular service-networked ecosystems, whose proper functioning is hugely based on digitally secure and reliable supply chain relationships. However, the naivety in the current security efforts by concerned parties to protect IoT devices, pose tough challenges to scalable and expanding cyber-risk management markets for IoT societies, post a systemic cyber-catastrophe. As firms increasingly turn to cyber-insurance for reliable risk management, and insurers turn to reinsurance for their own risk management, questions arise as to how modern-day cyber risks aggregate and accumulate, and whether reinsurance is a feasible model for reliable catastrophic risk management and transfer in smart cities. In this introductory effort, we analyze (a) whether traditional cyber-risk spreading is a sustainable risk management practice and (b) under what conditions, for the quite conservative scenario when proportions of i.i.d. catastrophic cyber-risks of a significant heavy-tailed nature are aggregated by a cyber-risk manager.