A Novel Approach to Collectively Determine Cybersecurity Performance Benchmark Data

Richard Baskerville () and Vijay Vaishnavi ()
Additional contact information
Richard Baskerville: Georgia State University
Vijay Vaishnavi: Georgia State University

A chapter in Design Science Research. Cases, 2020, pp 17-41 from Springer

Abstract: Abstract How do we determine cybersecurity performance benchmark data across organizations without the organizations revealing data points involving their frequency of information compromises? Disclosures of underlying data points are fundamentally inhibited by the need for privacy. It is a responsible organizational action to prevent the risk of expected or unexpected damages through data disclosure. Obtaining the data, especially valid and reliable data, necessary to calculate benchmarks, was thus an unsolvable wicked problem. The problem was therefore redefined as: How do we enable a distributed power-base of cybersecurity managers across organizations to collectively determine their benchmark data without actually disclosing their own data points? The core of the solution is a simple creative idea of having a protocol for a network of organizations to calculate benchmarks by distributing such calculations starting with some obfuscating data instead of centrally collecting the constituent data points of each organization. In this way, the confidential data of the organization would never be released beyond organizational systems. The fuller development of the protocol faced the issues of establishing trust in the network and preventing statistical compromises that were addressed through creative use of available technology, leading to the final solution, a distributed peer-to-peer architecture called Trusted Query Network (TQN). Distributed processing can induce trust and privacy into computer networks. In addition: (1) A research group representing multiple strengths and different but complementary backgrounds can be a very powerful asset in solving difficult problems. (2) Use of creativity is central to design science research but is particularly needed in solving apparently intractable problems. A group format can encourage free flow of ideas and brainstorming that are useful in spurring creativity. (3) It is very useful to be visionary in finding and solving challenging problems. Research groups provide the psychological strength to confront existing design challenges and to visualize their out-of-the-box solutions.

Date: 2020
References: Add references at CitEc
Citations:

There are no downloads for this item, see the EconPapers FAQ for hints about obtaining it.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:spr:prochp:978-3-030-46781-4_2

Ordering information: This item can be ordered from
http://www.springer.com/9783030467814

DOI: 10.1007/978-3-030-46781-4_2

Access Statistics for this chapter

More chapters in Progress in IS from Springer
Bibliographic data for series maintained by Sonal Shukla () and Springer Nature Abstracting and Indexing ().