Cyber Insurance of Information Systems: Security and Privacy Cyber Insurance Contracts for ICT and Helathcare Organizations

作者: George Hatzivasilis , Panos Chatziadam , Nikos Petroulakis , Sotiris Ioannidis , Matteo Mangini

DOI: 10.1109/CAMAD.2019.8858165

关键词:

摘要: Nowadays, more-and-more aspects of our daily activities are digitalized. Data and assets in the cyber-space, both for individuals organizations, must be safeguarded. Thus, insurance sector face challenge digital transformation 5G era with right set tools. In this paper, we present CyberSure — an framework information systems. investigates interplay between certification, risk management, cyber processes. It promotes continuous monitoring as new building block order to overcome current obstacles identifying real-time contractual violations by insured party receiving early warning notifications prior violation. Lightweight modules capture status operating components send data backend system which performs core decision making. Therefore, is certified dynamically, perspectives being evaluated at runtime operation evolves. As become available, management policies adjusted fine-tuned. When incident occurs, company possesses adequate assess situation fast, estimate accurately level a potential loss, decrease required period compensating customer. The applied ICT healthcare domains, assessing medium-size organizations. GDPR implications also considered overall setting effective scalable.

参考文章(15)
Jart Armin, Bryn Thompson, Davide Ariu, Giorgio Giacinto, Fabio Roli, Piotr Kijewski, 2020 Cybercrime Economic Costs: No Measure No Solution availability, reliability and security. pp. 701- 710 ,(2015) , 10.1109/ARES.2015.56
Tridib Bandyopadhyay, Vijay S. Mookerjee, Ram C. Rao, Why IT managers don't go for cyber-insurance products Communications of The ACM. ,vol. 52, pp. 68- 73 ,(2009) , 10.1145/1592761.1592780
A. Arora, R. Telang, Economics of software vulnerability disclosure ieee symposium on security and privacy. ,vol. 3, pp. 20- 25 ,(2005) , 10.1109/MSP.2005.12
Lin Gao, George Iosifidis, Jianwei Huang, Leandros Tassiulas, Economics of mobile data offloading 2013 Proceedings IEEE INFOCOM. pp. 3303- 3308 ,(2013) , 10.1109/INFCOM.2013.6567155
Per Hakon Meland, Inger Anne Tondel, Bjornar Solhaug, Mitigating Risk with Cyberinsurance ieee symposium on security and privacy. ,vol. 13, pp. 38- 43 ,(2015) , 10.1109/MSP.2015.137
Maria Krotsiani, George Spanoudakis, Christos Kloukinas, Monitoring-Based Certification of Cloud Service Security Proceedings of the Confederated International Conferences on On the Move to Meaningful Internet Systems: OTM 2015 Conferences - Volume 9415. pp. 644- 659 ,(2015) , 10.1007/978-3-319-26148-5_44
Angelica Marotta, Fabio Martinelli, Stefano Nanni, Albina Orlando, Artsiom Yautsiukhin, Cyber-insurance survey Computer Science Review. ,vol. 24, pp. 35- 61 ,(2017) , 10.1016/J.COSREV.2017.01.001
Maria Krotsiani, Christos Kloukinas, George Spanoudakis, Cloud Certification Process Validation Using Formal Methods international conference on service oriented computing. pp. 65- 79 ,(2017) , 10.1007/978-3-319-69035-3_5
Daniel Woods, Andrew Simpson, Policy measures and cyber insurance: A framework Journal of Cyber Policy. ,vol. 2, pp. 209- 226 ,(2017) , 10.1080/23738871.2017.1360927