A Multivariate Model to Quantify and Mitigate Cybersecurity Risk

摘要: The cost of cybersecurity incidents is large and growing. However, conventional methods for measuring loss choosing mitigation strategies use simplifying assumptions are often not supported by cyber attack data. In this paper, we present a multivariate model different, dependent types the effect on those attacks. Utilising collected data approaches, look at an example using to optimise choice mitigations. We find that optimal mitigations will depend goal—to prevent extreme damages or damage average. Numerical experiments suggest dependence aspect important can alter final risk estimates as much 30%. methodology be used quantify attacks support decision making strategies.