Computer Science – Cryptography and Security
Scientific paper
2011-07-24
Computer Science
Cryptography and Security
Scientific paper
Internet users such as individuals and organizations are subject to different types of epidemic risks such as worms, viruses, and botnets. To reduce the probability of risk, an Internet user generally invests in self-defense mechanisms like antivirus and antispam software. However, such software does not completely eliminate risk. Recent works have considered the problem of residual risk elimination by proposing the idea of cyber-insurance. In reality, an Internet user faces risks due to security attacks as well as risks due to non-security related failures (e.g., reliability faults in the form of hardware crash, buffer overflow, etc.) . These risk types are often indistinguishable by a naive user. However, a cyber-insurance agency would most likely insure risks only due to security attacks. In this case, it becomes a challenge for an Internet user to choose the right type of cyber-insurance contract as standard optimal contracts, i.e., contracts under security attacks only, might prove to be sub-optimal for himself. In this paper, we address the problem of analyzing cyber-insurance solutions when a user faces risks due to both, security as well as non-security related failures. We propose \emph{Aegis}, a novel cyber-insurance model in which the user accepts a fraction \emph{(strictly positive)} of loss recovery on himself and transfers rest of the loss recovery on the cyber-insurance agency. We mathematically show that given an option, Internet users would prefer Aegis contracts to traditional cyber-insurance contracts, under all premium types. This result firmly establishes the non-existence of traditional cyber-insurance markets when Aegis contracts are offered to users.
Golubchik Leana
Pal Ranjan
Psounis Konstantinos
No associations
LandOfFree
A Novel Cyber-Insurance for Internet Security does not yet have a rating. At this time, there are no reviews or comments for this scientific paper.
If you have personal experience with A Novel Cyber-Insurance for Internet Security, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and A Novel Cyber-Insurance for Internet Security will most certainly appreciate the feedback.
Profile ID: LFWR-SCP-O-76902