Special Issue on Economic Aspects of Cybersecurity and Privacy
• 大类 : 工程技术 - 2区
• 小类 : 计算机：理论方法 - 2区
The increasing number of security threats, attacks, and breaches together with the growing market of security products arise the question about how to protect critical information assets such as data, communication, and IT resources in a secure and most effective manner. The answer is yet ambiguous, but should at least provide guidelines for the asset owners whether to develop new cybersecurity and privacy mechanisms or to improve the existing ones. The economics of cybersecurity aims to provide economic justification of technical decisions taken to protect information assets. This branch of research arose on the understanding that the cost effective privacy and protection controls are equally crucial as much as a security breakdown.
The analyses in this field are focused on cost-benefit compromises based on analytical models describing potential losses and benefits for owner of information assets and their users (market participants). This process assumes that market participants’ behavior is driven by maximizing profits and minimizing losses. Their decisions are related to the choice of appropriate security measures to protect their data, wherein such measures are often identified with new software, hardware and/or services. On the basis of analytical models, the potential social and economic costs and benefits related to implementation of security products within the company may be estimated.
In recent years, data breach risk is often favored by potential financial benefits (e.g., blackmail). Moreover, motivation for cybercrime is also an important factor for economical investments. Therefore, new IT risk assessment methods should be assessed by national agencies and security specialized companies based on novel research results. This research should provide innovative models for the calculation of the returns on security investments and should consider both security metrics and cyber threat metrics. The models will bear in mind the use of innovative administrative and technical solutions as well as update of traditional security measures.
The second important area of interest is the specification of users’ behavior models concerning security support as well as the investigation of fraudsters’ behavior models with respect to security decisions; i.e., how the fraudsters act to achieve their goals. This area includes identity theft, consumer privacy breaches, and fraud influence in general. These issues are often referred as economics of privacy, creating a separate trend in comparison with the economics of security, although there are some common aspects. In this context, the term cybersecurity is referred to the ability of threats detection and applying adequate measures to reduce them, while personal privacy describes situations of asymmetrically distributed private information related to an individual.
This special issue aims at presenting the economics of cybersecurity and privacy through the presentation of challenges of any kind and the proposition of solutions in order to provide smooth research-to-market actions. Submissions could discuss novel ideas, original results, theoretical and applied research in topics, but not limited to:
- Cybersecurity investment decisions
- Measurement of cybercrime costs
- Cybercrime insurance
- Motivation for cybercrime
- Risk assessment in the face of current cyber threats
- Economic tools for protection against threats
- Models for customers’ behavior prediction
- Adaptive adversary behavior
- Cost-benefit analysis
- Economic results of data breaches in different sectors (e.g., banking, healthcare)
- Analysis of new customers’ behavior (e.g., online shopping)
- Analysis of cybersecurity economic experiences influencing the society