Interdependent risk networks: the threat of cyber attack

Annette Hofmann and Hidajet Ramaj

International Journal of Management and Decision Making, 2011, vol. 11, issue 5/6, 312-323

Abstract: This article presents an economic model that explicitly reflects the interdependent risk structure of a cyber network. We find that due to this interdependent risk structure, the level of cyber risk protection in the community is inefficient from the community's overall viewpoint. The analysis further suggests that decision processes should take into account the interdependent risk structure of the underlying internet-based network. Therefore, an organisation that invests in comprehensive cyber risk protection should be rewarded by other organisations for the benefits (in the form of lower exposure risk) that it has brought to the network. Another promising way to improve protection is to subsidise high-exposure organisations. It is also important that states implement laws to prevent cyber attacks and to protect organisations. Formal contractual agreements between different organisations specifying their data and information exchange and other interactions may also prove a promising strategy. A successful agreement may involve using rewards as coordinative mechanisms; for instance, in using non-monetary web certificates. Finally, the development of international standards for tracking and tracing technologies is essential in order to improve cyber safety.

Keywords: cyber risks; cyber attacks; cyber networks; risk protection; cyber security; economic models; interdependencies; interdependent risks; information networks; positive externalities; public goods; interdependent networks; risk networks; interdependent structures; decision processes; benefits; rewards; lower exposure risk; subsidies; high-exposure organisations; laws; legislation; contractual agreements; contracts; data exchange; information exchange; interactions; coordinative mechanisms; non-monetary web certificates; international standards; technology tracking; technology tracing; cyber safety; management; decision making; cyber harassment; corporations; internet; world wide web. (search for similar items in EconPapers)
Date: 2011
References: Add references at CitEc
Citations: View citations in EconPapers (5)

Downloads: (external link)
http://www.inderscience.com/link.php?id=43406 (text/html)
Access to full text is restricted to subscribers.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:ids:ijmdma:v:11:y:2011:i:5/6:p:312-323

Access Statistics for this article

More articles in International Journal of Management and Decision Making from Inderscience Enterprises Ltd
Bibliographic data for series maintained by Sarah Parker ().