The complexity of estimating systematic risk in networks

Proceedings of the Computer Security Foundations Workshop

Volumn 2014-January, Issue , 2014, Pages 325-336

  Johnson, Benjamin ^a   Laszka, Aron ^b   Grossklags, Jens ^c  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b BUDAPEST UNIVERSITY OF TECHNOLOGY AND ECONOMICS   (Hungary)

^c PENNSYLVANIA STATE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPLEX NETWORKS; ESTIMATION; PROBABILITY DISTRIBUTIONS; RISK PERCEPTION; SECURITY SYSTEMS; TOPOLOGY;

COMPROMISED NODES; MATHEMATICAL BASIS; NUMBER DISTRIBUTION; REAL-WORLD NETWORKS; SECURITY INCIDENT; SECURITY RESEARCH; SYSTEMATIC RISK; TOPOLOGICAL DATA;

NETWORK SECURITY;

EID: 84939614161     PISSN: 10636900     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSF.2014.30     Document Type: Conference Paper

References (38)

1. C. Drew, "Stolen data is tracked to hacking at Lockheed," New York Times, http://www. nytimes. com/2011/06/04/technology/ 04security. html, June 3, 2011
2. A. Betts, "A sobering day," Financial Times Labs, http://labs. ft. com/ 2013/05/a-sobering-day/, May 29, 2013
3. A. Laszka, M. Felegyhazi, and L. Buttyán, "A survey of interdependent security games," CrySyS Lab, Budapest University of Technology and Economics, Tech. Rep. CRYSYS-TR-2012-11-15, Nov 2012
4. M. Lelarge and J. Bolot, "Economic incentives to increase security in the internet: The case for insurance," in Proceedings of the 33rd IEEE International Conference on Computer Communications (INFOCOM), 2009, pp. 1494-1502
5. B. Johnson, A. Laszka, and J. Grossklags, "How many down? Toward understanding systematic risk in networks," in Proceedings of the 9th ACM Symposium on Information, Computer and Communications Security (ASIACCS), 2014
6. A. Laszka, B. Johnson, J. Grossklags, and M. Felegyhazi, "Estimating systematic risk in real-world networks," in Proceedings of the 18th International Conference on Financial Cryptography and Data Security (FC), 2014
7. R. Anderson, "Liability and computer security: Nine principles," in Proceedings of the Third European Symposium on Research in Computer Security (ESORICS), Brighton, UK, Nov. 1994, pp. 231-245
8. R. Böhme, "Towards insurable network architectures," it-Information Technology, vol. 52, no. 5, pp. 290-293, 2010
9. R. Böhme and G. Schwartz, "Modeling cyber-insurance: Towards a unifying framework," in Workshop on the Economics of Information Security, 2010
10. K. Birman and F. Schneider, "The monoculture risk put into context," IEEE Security and Privacy, vol. 7, no. 1, pp. 14-17, Jan. 2009
11. D. Geer, C. Pfleeger, B. Schneier, J. Quarterman, P. Metzger, R. Bace, and P. Gutmann, "Cyberinsecurity: The cost of monopoly. How the dominance of Microsoft's products poses a risk to society," 2003
12. R. Böhme and G. Kataria, "Models and measures for correlation in cyber-insurance," in Workshop on the Economics of Information Security, 2006
13. P.-Y. Chen, G. Kataria, and R. Krishnan, "Correlated failures, diversification, and information security risk management," MIS Quarterly, vol. 35, no. 2, pp. 397-422, Jun. 2011
14. H. Varian, "System reliability and free riding," in Economics of Information Security, J. Camp and S. Lewis, Eds. Dordrecht, The Netherlands: Kluwer Academic Publishers, 2004, pp. 1-15
15. J. Grossklags, N. Christin, and J. Chuang, "Secure or insure?: A gametheoretic analysis of information security games," in Proceedings of the 17th International World Wide Web Conference, 2008, pp. 209-218
16. B. Johnson, R. Böhme, and J. Grossklags, "Security games with market insurance," Decision and Game Theory for Security, pp. 117-130, 2011
17. J. Aspnes, K. Chang, and A. Yampolskiy, "Inoculation strategies for victims of viruses and the sum-of-squares partition problem," J. Computer and System Sciences, vol. 72, no. 6, pp. 1077-1093, Sep. 2006
18. T. Moscibroda, S. Schmid, and R. Wattenhofer, "When selfish meets evil: Byzantine players in a virus inoculation game," in Proceedings of the ACM Symposium on Principles of Distributed Computing, 2006, pp. 35-44
19. J. Kephart and S. White, "Directed-graph epidemiological models of computer viruses," in Proceedings of the IEEE Computer Society Symposium on Research in Security and Privacy, 1991, pp. 343-359
20. -, "Measuring and modeling computer virus prevalence," in Proceedings of the IEEE Computer Society Symposium on Research in Security and Privacy, 1993, pp. 2-15
21. R. Pastor-Satorras and A. Vespignani, "Epidemic spreading in scale-free networks," Physical Review Letters, vol. 86, no. 14, pp. 3200-3203, 2001
22. V. Eguiluz and K. Klemm, "Epidemic threshold in structured scale-free networks," Physical Review Letters, vol. 89, no. 10, p. 108701, 2002
23. R. Pastor-Satorras and A. Vespignani, "Epidemic dynamics in finite size scale-free networks," Physical Review E, vol. 65, no. 3, p. 035108, 2002
24. Y. Wang, D. Chakrabarti, C. Wang, and C. Faloutsos, "Epidemic spreading in real networks: An eigenvalue viewpoint," in Proceedings of the 22nd International Symposium on Reliable Distributed Systems, 2003, pp. 25-34
25. D. Chakrabarti, Y. Wang, C. Wang, J. Leskovec, and C. Faloutsos, "Epidemic thresholds in real networks," ACM Transactions on Information and System Security, vol. 10, no. 4, p. 1, 2008
26. A. Ganesh, L. Massoulié, and D. Towsley, "The effect of network topology on the spread of epidemics," in Proceedings of the 24th Annual Joint Conference of the IEEE Computer and Communications Societies (INFOCOM), Mar. 2005, pp. 1455-1466
27. H. Kunreuther and G. Heal, "Interdependent security," Journal of Risk and Uncertainty, vol. 26, no. 2, pp. 231-249, 2003
28. G. Heal and H. Kunreuther, "Interdependent security: A general model," NBER Working Paper No. 10706, August 2004
29. B. Johnson, J. Grossklags, N. Christin, and J. Chuang, "Uncertainty in interdependent security games," Decision and Game Theory for Security, pp. 234-244, 2010
30. H. Chan, M. Ceyko, and L. Ortiz, "Interdependent defense games: Modeling interdependent security under deliberate attacks," in Proceedings of the Twenty-Eighth Conference on Uncertainty in Artificial Intelligence (UAI), Catalina Island, CA, Aug. 2012, pp. 152-162
31. H. Ogut, N. Menon, and S. Raghunathan, "Cyber insurance and IT security investment: Impact of interdependent risk," in Workshop on the Economics of Information Security, 2005
32. A.-L. Barabási, "Scale-free networks: A decade and beyond," Science, vol. 325, no. 5939, pp. 412-413, Jul. 2009
33. A.-L. Barabási and R. Albert, "Emergence of scaling in random networks," Science, vol. 286, no. 5439, pp. 509-512, Oct. 1999
34. L. Li, D. Alderson, J. Doyle, and W. Willinger, "Towards a theory of scale-free graphs: Definition, properties, and implications," Internet Mathematics, vol. 2, no. 4, pp. 431-523, 2005
35. M. Stumpf, C. Wiuf, and R. May, "Subnets of scale-free networks are not scale-free: Sampling properties of networks," Proceedings of the National Academy of Sciences of the United States of America, vol. 102, no. 12, pp. 4221-4224, 2005
36. S. Dhall, S. Lakshmivarahan, and P. Verma, "On the number and the distribution of the Nash equilibria in supermodular games and their impact on the tipping set," in Proceedings of the International Conference on Game Theory for Networks (GameNets), Istanbul, Turkey, May 2009, pp. 691-696
37. M. Kearns and L. Ortiz, "Algorithms for interdependent security games," in Advances in Neural Information Processing Systems 16, S. Thrun, L. Saul, and B. Schölkopf, Eds. MIT Press, 2004, pp. 561-568
38. P. Erdos and A. Rényi, "On the evolution of random graphs," Publications of the Mathematical Institute of the Hungarian Academy of Sciences, vol. 5, pp. 17-61, 1960