Special Considerations for Risks Associated with Cyberattacks

Allan S. Benjamin
Additional contact information
Allan S. Benjamin: Allan Benjamin Company

Chapter Chapter 9 in Integration of Project, Infrastructure, and Enterprise Risk Management, 2025, pp 107-113 from Springer

Abstract: Abstract The chapter further highlights and explains some of the special considerations that need to be taken into account for risks associated with cyberattacks, and addresses in more detail some of the essential differences between analyzing cyber risks and risks from other intentional acts, versus risks associated with accidents and other random occurrences. Accordingly, it recommends the use of performance measures that are based on the time it takes for an adversary to find a way to breach the system and inflict harm without being detected. Based on lessons learned from previously perpetrated large-scale cyberattacks, such as the SolarWinds attack, it advocates for red teams consisting of both government and private cybersecurity experts to take a war-game approach for uncovering the fastest ways of penetrating existing distributed cyber networks without detection. It also describes a process for developing probability distributions for such performance measures using results obtained from the red teams.

Keywords: Cybersecurity; Conditional probabilities; Adversary; Infiltration time; Red teams; Lognormal distribution; NotPetya attack; SolarWinds attack; Public sector; Private sector; Coordination (search for similar items in EconPapers)
Date: 2025
References: Add references at CitEc
Citations:

There are no downloads for this item, see the EconPapers FAQ for hints about obtaining it.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:spr:rischp:978-3-031-85070-7_9

Ordering information: This item can be ordered from
http://www.springer.com/9783031850707

DOI: 10.1007/978-3-031-85070-7_9

Access Statistics for this chapter

More chapters in Risk, Governance and Society from Springer
Bibliographic data for series maintained by Sonal Shukla () and Springer Nature Abstracting and Indexing ().