An Overview of Security Breach Probability Models

Autor: Alessandro Mazzoccoli, Maurizio Naldi
Jazyk: angličtina
Rok vydání: 2022
Předmět:
Zdroj: Risks, Vol 10, Iss 11, p 220 (2022)
Druh dokumentu: article
ISSN: 2227-9091
DOI: 10.3390/risks10110220
Popis: Cybersecurity breach probability functions describe how cybersecurity investments impact the actual vulnerability to cyberattacks through the probability of success of the attack. They essentially use mathematical models to make cyber-risk management choices. This paper provides an overview of the breach probability models that appear in the literature. For each of them, the form of the mathematical functions and their properties are described. The models exhibit a wide variety of functional relationships between breach probability and investments, including linear, concave, convex, and a mixture of the latter two. Each model describes a parametric family, with some models have a single parameter, and others have two. A sensitivity analysis completes the overview to identify the impact of the model parameters: the estimation of the parameters which have a larger influence on the breach probability is more critical and deserves greater attention.
Databáze: Directory of Open Access Journals