Skip to main content
Erschienen in: Quality & Quantity 3/2022

09.07.2021

Cyber risk index: a socio-technical composite index for assessing risk of cyber attacks with negative outcome

verfasst von: Marco Bolpagni

Erschienen in: Quality & Quantity | Ausgabe 3/2022

Einloggen

Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.

search-config
loading …

Abstract

Information and Communication Technologies has become a key-part of our life and transformed every aspect of it, from business to politics. Cybersecurity policy making has been a topic of interest in the last decade and the scientific community identified best practices, frameworks and metrics but no index in the literature has ever measured cyber security as a multidimensional phenomenon considering both cyber threats and readiness of countries. The aim of this paper is to propose a composite index for assessing cyber risk and secondly to investigate which socio-economic factors influence the index itself. The Cyber Risk Index showed good robustness and provided information on both the current cyber risk situation in the world and the socio-economic factors contributing to its increase.
The results showed that the level of cyber risk is mainly influenced by four socio-economic factors: human development index, GDP, democracy and peace, suggesting that both the geopolitical and the socio-economic scenario play a key role.

Sie haben noch keine Lizenz? Dann Informieren Sie sich jetzt über unsere Produkte:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

  • über 102.000 Bücher
  • über 537 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Maschinenbau + Werkstoffe
  • Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 340 Zeitschriften

aus folgenden Fachgebieten:

  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Versicherung + Risiko




Jetzt Wissensvorsprung sichern!

Anhänge
Nur mit Berechtigung zugänglich
Literatur
Zurück zum Zitat Bustamante, F., Fuertes, W., Tulkeredis, T., Ron, M.: Situational status of global cybersecurity and cyber defense according to global indicators. Adaptation of a model for Ecuador. Smart Innovation, Systems and Technologies. 94, 12–26 (2018) Bustamante, F., Fuertes, W., Tulkeredis, T., Ron, M.: Situational status of global cybersecurity and cyber defense according to global indicators. Adaptation of a model for Ecuador. Smart Innovation, Systems and Technologies. 94, 12–26 (2018)
Zurück zum Zitat Carlson, K.D., Herdman, A.O.: Understanding the impact of convergent validity on research results. Organ. Res. Methods 15(1), 17–32 (2012)CrossRef Carlson, K.D., Herdman, A.O.: Understanding the impact of convergent validity on research results. Organ. Res. Methods 15(1), 17–32 (2012)CrossRef
Zurück zum Zitat De Muro, P., Mazziotta, M., Pareto, A.: Composite indices of development and poverty: an application to MDGs. Soc. Indic. Res. 104(1), 1–18 (2011)CrossRef De Muro, P., Mazziotta, M., Pareto, A.: Composite indices of development and poverty: an application to MDGs. Soc. Indic. Res. 104(1), 1–18 (2011)CrossRef
Zurück zum Zitat Gandhi, R., Sharma, A., Mahoney, W., Sousan, W., Zhu, Q., Laplante, P.: Dimensions of cyber-attacks: cultural, social, economic, and political. IEEE Technol. Soc. Mag. 30(1), 28–38 (2011)CrossRef Gandhi, R., Sharma, A., Mahoney, W., Sousan, W., Zhu, Q., Laplante, P.: Dimensions of cyber-attacks: cultural, social, economic, and political. IEEE Technol. Soc. Mag. 30(1), 28–38 (2011)CrossRef
Zurück zum Zitat Hansman, S., Hunt, R.: A taxonomy of network and computer attacks. Comput. Secur. 24(1), 31–43 (2005)CrossRef Hansman, S., Hunt, R.: A taxonomy of network and computer attacks. Comput. Secur. 24(1), 31–43 (2005)CrossRef
Zurück zum Zitat Harlow, L.L., Oswald, F.L.: Big data in psychology. Psychol. Methods 21(4), 447–457 (2016)CrossRef Harlow, L.L., Oswald, F.L.: Big data in psychology. Psychol. Methods 21(4), 447–457 (2016)CrossRef
Zurück zum Zitat Howard, J.D., Longstaff, T.A.: A common language for computer security incidents. Sandia National Laboratories, Albuquerque, New Mexico (1998) Howard, J.D., Longstaff, T.A.: A common language for computer security incidents. Sandia National Laboratories, Albuquerque, New Mexico (1998)
Zurück zum Zitat Jang-Jaccard, J., Nepal, S.: A survey of emerging threats in cybersecurity. J. Comput. Syst. Sci. 80(5), 973–993 (2014)CrossRef Jang-Jaccard, J., Nepal, S.: A survey of emerging threats in cybersecurity. J. Comput. Syst. Sci. 80(5), 973–993 (2014)CrossRef
Zurück zum Zitat Karabacak, B., Yildirim, S.O., Baykal, N.: A vulnerability-driven cyber security maturity model for measuring national critical infrastructure protection preparedness. Int. J. Crit. Infrastruct. Prot. 15, 47–59 (2016)CrossRef Karabacak, B., Yildirim, S.O., Baykal, N.: A vulnerability-driven cyber security maturity model for measuring national critical infrastructure protection preparedness. Int. J. Crit. Infrastruct. Prot. 15, 47–59 (2016)CrossRef
Zurück zum Zitat Kaspersky: Cyberthreat statistics by Kaspersky Lab, https:/statistics.securelist.com/en (2020). Accessed 01 May 2020 Kaspersky: Cyberthreat statistics by Kaspersky Lab, https:/statistics.securelist.com/en (2020). Accessed 01 May 2020
Zurück zum Zitat Krabbe, P.F.M.: The Measurement of Health and Health Status: Concepts. Methods and Applications from a Multidisciplinary Perspective. Academic Press, Cambridge, Massachusetts (2016) Krabbe, P.F.M.: The Measurement of Health and Health Status: Concepts. Methods and Applications from a Multidisciplinary Perspective. Academic Press, Cambridge, Massachusetts (2016)
Zurück zum Zitat Lindsay, J.R.: The impact of china on cybersecurity: fiction and friction. Int. Secur. 39(3), 7–53 (2016)CrossRef Lindsay, J.R.: The impact of china on cybersecurity: fiction and friction. Int. Secur. 39(3), 7–53 (2016)CrossRef
Zurück zum Zitat Marczak, W.R., Scott-Railton, J., Marquis-Boire, M., Paxson, V.: When governments hack opponents: a look at actors and technology. In: 23rd Security Symposium, USENIX (2014) Marczak, W.R., Scott-Railton, J., Marquis-Boire, M., Paxson, V.: When governments hack opponents: a look at actors and technology. In: 23rd Security Symposium, USENIX (2014)
Zurück zum Zitat Mazziotta, M., Pareto, A.: Methods for constructing composite indices: One for all or all for one? Rivista Italiana Di Economia Demografia e Statistica 82, 394–411 (2016) Mazziotta, M., Pareto, A.: Methods for constructing composite indices: One for all or all for one? Rivista Italiana Di Economia Demografia e Statistica 82, 394–411 (2016)
Zurück zum Zitat OECD: Handbook on Constructing Composite Indicators. Methodology and user guide. OECD Publications, Paris (2008) OECD: Handbook on Constructing Composite Indicators. Methodology and user guide. OECD Publications, Paris (2008)
Zurück zum Zitat Radanliev, P., De Roure, D., Van Kleek, M., Ani, U., Burnap, P., Anthi, E., Nurse, J.R.C., Santos, O., Montalvo, R.M., Maddox, L.: Dynamic real-time risk analytics of uncontrollable states in complex internet of things systems: cyber risk at the edge. Environ. Syst. Decis. 41, 1–12 (2020) Radanliev, P., De Roure, D., Van Kleek, M., Ani, U., Burnap, P., Anthi, E., Nurse, J.R.C., Santos, O., Montalvo, R.M., Maddox, L.: Dynamic real-time risk analytics of uncontrollable states in complex internet of things systems: cyber risk at the edge. Environ. Syst. Decis. 41, 1–12 (2020)
Zurück zum Zitat Shad, M.R.: Cyber threat landscape and readiness challenge of Pakistan. Strateg. Stud. 39(1), 1–19 (2019) Shad, M.R.: Cyber threat landscape and readiness challenge of Pakistan. Strateg. Stud. 39(1), 1–19 (2019)
Zurück zum Zitat Stanton, E.A.: The human development index: a history. PERI Working Papers 85 (2007) Stanton, E.A.: The human development index: a history. PERI Working Papers 85 (2007)
Metadaten
Titel
Cyber risk index: a socio-technical composite index for assessing risk of cyber attacks with negative outcome
verfasst von
Marco Bolpagni
Publikationsdatum
09.07.2021
Verlag
Springer Netherlands
Erschienen in
Quality & Quantity / Ausgabe 3/2022
Print ISSN: 0033-5177
Elektronische ISSN: 1573-7845
DOI
https://doi.org/10.1007/s11135-021-01199-3

Weitere Artikel der Ausgabe 3/2022

Quality & Quantity 3/2022 Zur Ausgabe

Premium Partner