How many down? Toward understanding systematic risk in networks

ASIA CCS 2014 - Proceedings of the 9th ACM Symposium on Information, Computer and Communications Security

Volumn , Issue , 2014, Pages 495-500

  Johnson, Benjamin ^a   Laszka, Aron ^b   Grossklags, Jens ^c  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b BUDAPEST UNIVERSITY OF TECHNOLOGY AND ECONOMICS   (Hungary)

^c PENNSYLVANIA STATE UNIVERSITY   (United States)

Author keywords

Cyber insurance; Economics of security; Networks; Risk mitigation; Scale free networks; Security; Topology

Indexed keywords

COMPLEX NETWORKS; NETWORKS (CIRCUITS); TOPOLOGY;

ARBITRARY TOPOLOGY; CORRELATION EFFECT; GRAPHICAL ILLUSTRATIONS; NETWORKED SYSTEMS; RISK MITIGATION; RISK PROPAGATION; SECURITY; SIMULATION ALGORITHMS;

NETWORK SECURITY;

EID: 84984863583     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2590296.2590308     Document Type: Conference Paper

References (29)

1. R. Anderson. Liability and computer security: Nine principles. In Proceedings of the Third European Symposium on Research in Computer Security (ESORICS), pages 231-245, Nov. 1994.
2. J. Aspnes, K. Chang, and A. Yampolskiy. Inoculation strategies for victims of viruses and the sum-of-squares partition problem. Journal of Computer and System Sciences, 72(6):1077-1093, Sept. 2006.
3. A.-L. Barabási. Scale-free networks: A decade and beyond. Science, 325(5939):412-413, July 2009.
4. A.-L. Barabási and R. Albert. Emergence of scaling in random networks. Science, 286(5439):509-512, Oct. 1999.
5. K. Birman and F. Schneider. The monoculture risk put into context. IEEE Security and Privacy, 7(1):14-17, Jan. 2009.
6. R. Böhme. Towards insurable network architectures. it - Information Technology, 52(5):290-293, Sept. 2010.
7. R. Böhme and G. Kataria. Models and measures for correlation in cyber-insurance. In Workshop on the Economics of Information Security, June 2006.
8. R. Böhme and G. Schwartz. Modeling cyber-insurance: Towards a unifying framework. In Workshop on the Economics of Information Security, June 2010.
9. H. Chan, M. Ceyko, and L. Ortiz. Interdependent defense games: Modeling interdependent security under deliberate attacks. In Proceedings of the Twenty-Eighth Conference on Uncertainty in Artificial Intelligence (UAI), pages 152-162, Aug. 2012.
10. P.-Y. Chen, G. Kataria, and R. Krishnan. Correlated failures, diversification, and information security risk management. MIS Quarterly, 35(2):397-422, June 2011.
11. S. Dhall, S. Lakshmivarahan, and P. Verma. On the number and the distribution of the Nash equilibria in supermodular games and their impact on the tipping set. In Proceedings of the International Conference on Game Theory for Networks (GameNets), pages 691-696, May 2009.
12. M. Gjoka, M. Kurant, C. Butts, and A. Markopoulou. Practical recommendations on crawling online social networks. IEEE Journal on Selected Areas in Communications, 29(9):1872-1892, Oct. 2011.
13. L. Gordon, M. Loeb, and W. Lucyshyn. Sharing information on computer systems security: An economic analysis. Journal of Accounting and Public Policy, 22(6):461-485, November-December 2003.
14. J. Grossklags, N. Christin, and J. Chuang. Secure or insure?: A game-theoretic analysis of information security games. In Proceedings of the 17th International World Wide Web Conference (WWW), pages 209-218, Apr. 2008.
15. G. Heal and H. Kunreuther. Interdependent security: A general model. Working Paper No. 10706, NBER, August 2004.
16. B. Johnson, R. Böhme, and J. Grossklags. Security games with market insurance. Decision and Game Theory for Security, pages 117-130, 2011.
17. B. Johnson, J. Grossklags, N. Christin, and J. Chuang. Uncertainty in interdependent security games. Decision and Game Theory for Security, pages 234-244, 2010.
18. B. Johnson, A. Laszka, and J. Grossklags. The complexity of estimating systematic risk in networks. Working paper, Feb. 2014.
19. M. Kearns and L. Ortiz. Algorithms for interdependent security games. In S. Thrun, L. Saul, and B. Schölkopf, editors, Advances in Neural Information Processing Systems 16, pages 561-568. MIT Press, 2004.
20. J. Kephart and S. White. Directed-graph epidemiological models of computer viruses. In Proceedings of the IEEE Computer Society Symposium on Research in Security and Privacy, pages 343-359, May 1991.
21. H. Kunreuther and G. Heal. Interdependent security. Journal of Risk and Uncertainty, 26(2):231-249, 2003.
22. A. Laszka, M. Felegyhazi, and L. Buttyán. A survey of interdependent security games. Technical Report CRYSYS-TR-2012-11-15, CrySyS Lab, Budapest University of Technology and Economics, Nov 2012.
23. A. Laszka, B. Johnson, J. Grossklags, and M. Felegyhazi. Estimating systematic risk in real-world networks. In Proceedings of the 18th International Conference on Financial Cryptography and Data Security (FC), 2014.
24. L. Li, D. Alderson, J. Doyle, and W. Willinger. Towards a theory of scale-free graphs: Definition, properties, and implications. Internet Mathematics, 2(4):431-523, 2005.
25. A. Mislove, M. Marcon, K. Gummadi, P. Druschel, and B. Bhattacharjee. Measurement and analysis of online social networks. In Proceedings of the 7th ACM SIGCOMM Conference on Internet Measurement, pages 29-42, 2007.
26. T. Moscibroda, S. Schmid, and R. Wattenhofer. When selfish meets evil: Byzantine players in a virus inoculation game. In Proceedings of the ACM Symposium on Principles of Distributed Computing, pages 35-44, 2006.
27. H. Ogut, N. Menon, and S. Raghunathan. Cyber insurance and IT security investment: Impact of interdependent risk. In Workshop on the Economics of Information Security, 2005.
28. M. Stumpf, C. Wiuf, and R. May. Subnets of scale-free networks are not scale-free: Sampling properties of networks. Proceedings of the National Academy of Sciences of the United States of America, 102(12):4221-4224, 2005.
29. H. Varian. System reliability and free riding. In J. Camp and S. Lewis, editors, Economics of Information Security, pages 1-15. Kluwer Academic Publishers, Dordrecht, The Netherlands, 2004.