Ioannidis, C; Williams, J; Pym, D; Gheyas, I; (2014) Resilience in Information Stewardship. In: Grossklags, J, (ed.) Proceedings of the 13th Annual Workshop on the Economic of Information Security (WEIS 2014). Workshop on the Economics of Information Security (WEIS): State College, PA, USA.

Text IoannidisPymWilliamsGheyas-Resilience.pdf Available under License : See the attached licence file. Download (1MB)

Abstract

Information security is concerned with protecting the confi- dentiality, integrity, and availability of information systems. System managers deploy their resources with the aim of maintaining target levels of these attributes in the presence of reactive threats. Information stewardship is the challenge of maintaining the sustainability and resilience of the security attributes of (complex, interconnected, multi-agent) information ecosystems. In this paper, we present, in the tradition public economics, a model of stewardship which addresses directly the question of resilience. We model attacker-target-steward behaviour in a fully endogenous Nash equilibrium setting. We analyse the occurrence of externalities across targets and assess the steward’s ability to internalize these externalities under varying informational assumptions. We apply and simulate this model in the case of a critical national infrastructure example.

Download activity - last month

Export as XMLCSVJSON

Download activity - last 12 months

Export as JSONCSVXML

Downloads by country - last 12 months

Export as XMLCSVJSON

Archive Staff Only

View Item