scholarly journals Can We Evaluate the Impact of Cyber Security Information Sharing?

Author(s):  
Adam Zibak ◽  
Andrew Simpson
2021 ◽  
pp. 2150003
Author(s):  
Boyang Dai ◽  
Xiangfeng Yang ◽  
Gyei-Kark Park

The coalitional game focuses on how people share the payoffs of collaboration when they form coalitions. However, we cannot accurately obtain the different coalitions’ payoffs because of the actual situation’s limitation or economic and technical factors. Therefore, we have to rely on experts in the field to estimate the likelihood of various events and give their belief degrees. To deal with the belief degrees, scholars of uncertainty theory suppose the transferable payoffs to be uncertain variables and propose the uncertain coalitional game. Many expected and optimistic solution concepts have been put forward in the literature, even though the expected value criterion does not consider the decision-maker’s attitude to risk, and the optimistic value criterion is too extreme. To better describe the different subjective judgments of decision-makers, the Hurwicz criterion is applied to the uncertain coalitional game, in which the players intend to maximize their Hurwicz payoffs. Besides, the method to discover the Hurwicz-core is provided, and the condition that the core is nonempty is proved. What’s more, the Hurwicz–Shapley value is mathematically proven to be in the Hurwicz-core in a convex uncertain coalitional game. An application in cyber security information sharing is provided.


2021 ◽  
pp. 313-327
Author(s):  
Stuart Murdoch

This chapter considers the impact on cyber security of a shift from voluntary coordination to mandatory incident reporting. It traces the efforts to organize collaboration for cyber security incident response back to its voluntary beginnings with the establishment of CERT/CC by DARPA in response to the Morris Worm in 1988, via the establishment of ISACs then ISAOs under successive US presidents, to the CiSP in the UK following the London 2012 Olympics. Recognizing efforts to standardize and automate information sharing, the discussion touches on how information sharing has come to form the basis of national cyber strategies, forming a foundational element of internationally recognized maturity models for those strategies, and it goes on to consider the increasing move towards more mandatory incident reporting, especially in Critical National Infrastructure sectors across the globe, from the Defence Industrial Base in the United States to the NISD throughout the European Union. It considers the impact of mandating reporting on levels of collaboration overall, concluding that regulators must be careful not to create sector-specific silos or undermine existing levels of voluntary sharing through their enforcement of such mandatory schemes.


2015 ◽  
Vol 82 ◽  
pp. 127-142 ◽  
Author(s):  
Francesco Costantino ◽  
Giulio Di Gravio ◽  
Ahmed Shaban ◽  
Massimo Tronci

Sign in / Sign up

Export Citation Format

Share Document