Economic impact of IoT cyber risk - Analysing past and present to predict the future developments in IoT risk analysis and IoT cyber insurance

This paper is focused on mapping the current evolution of Internet of Things (IoT) and its associated cyber risks for the Industry 4.0 (I4.0) sector. We report the results of a qualitative empirical study that correlates academic literature with 14 - I4.0 frameworks and initiatives. We apply the grounded theory approach to synthesise the findings from our literature review, to compare the cyber security frameworks and cyber security quantitative impact assessment models, with the world leading I4.0 technological trends. From the findings, we build a new impact assessment model of IoT cyber risk in Industry 4.0. We therefore advance the efforts of integrating standards and governance into Industry 4.0 and offer a better understanding of economics impact assessment models for I4.0.

[1]  Lawrence A. Gordon,et al.  The economics of information security investment , 2002, TSEC.

[2]  Paulo Leitão,et al.  Industrial automation based on cyber-physical systems technologies: Prototype implementations and challenges , 2016, Comput. Ind..

[3]  N. Jazdi,et al.  Cyber physical systems in the context of Industry 4.0 , 2014, 2014 IEEE International Conference on Automation, Quality and Testing, Robotics.

[4]  C. Fung,et al.  Value analysis of cyber security based on attack types , 2015 .

[5]  R. Thaler,et al.  Nudge: Improving Decisions About Health, Wealth, and Happiness , 2008 .

[6]  Zachary A. Collier,et al.  Systems engineering framework for cyber physical security and resilience , 2015, Environment Systems and Decisions.

[7]  Jay Lee,et al.  A Cyber-Physical Systems architecture for Industry 4.0-based manufacturing systems , 2015 .

[8]  Insup Lee,et al.  Cyber-physical systems: The next computing revolution , 2010, Design Automation Conference.

[9]  G. Rodewald..  Aligning information security investments with a firm's risk tolerance , 2005, InfoSecCD '05.

[10]  Herbert Gintis,et al.  Richard H. Thaler – Cass R. Sunstein: Nudge: Improving Decisions about Health, Wealth, and Happiness , 2008 .

[11]  Peter I. Corke,et al.  Transforming Agriculture through Pervasive Wireless Sensor Networks , 2007, IEEE Pervasive Computing.

[12]  Ananth Balashankar,et al.  Software Defined Networking , 2019, 2019 19th International Conference on Sciences and Techniques of Automatic Control and Computer Engineering (STA).

[13]  Martin Eling,et al.  Insurability of Cyber Risk , 2014 .

[14]  Gary W. Anderson.  The Economic Impact of Technology Infrastructure for Smart Manufacturing | NIST , 2016 .

[15]  Michael Engel,et al.  Cyber-Physical Systems: Opportunities, Challenges and (Some) Solutions , 2016, Management of Cyber Physical Objects in the Future Internet of Things.

[16]  Keyun Ruan,et al.  Introducing cybernomics: A unifying economic framework for measuring cyber risk , 2017, Comput. Secur..

[17]  Marimuthu Palaniswami,et al.  Internet of Things (IoT): A vision, architectural elements, and future directions , 2012, Future Gener. Comput. Syst..

[18]  Scott J. Shackelford.  Protecting Intellectual Property and Privacy in the Digital Age: The Use of National Cybersecurity Strategies to Mitigate Cyber Risk , 2015 .

[19]  Chris Arney.  Nudge: Improving Decisions about Health, Wealth, and Happiness , 2015 .

[20]  Peter C. Evans,et al.  Industrial Internet: Pushing the Boundaries of Minds and Machines , 2012 .

[21]  Gary W. Anderson.  The Economic Impact of Technology Infrastructure for Additive Manufacturing , 2016 .

[22]  Fabio Roli,et al.  2020 Cybercrime Economic Costs: No Measure No Solution , 2015, 2015 10th International Conference on Availability, Reliability and Security.

[23]  Kagermann Henning.  Recommendations for implementing the strategic initiative INDUSTRIE 4.0 , 2013 .

[24]  Yong Wang,et al.  SDF: software-defined flash for web-scale internet storage systems , 2014, ASPLOS.

[25]  Neil Gershenfeld,et al.  When things start to think , 1999 .

[26]  Alexandre Padilla.  Review of Richard H. Thaler and Cass R. Sunstein, Nudge: Improving decisions about health, wealth, and happiness , 2009 .

[27]  Tyler Moore,et al.  The Economics of Information Security , 2006, Science.

[28]  Vipin Kumar,et al.  Trends in big data analytics , 2014, J. Parallel Distributed Comput..

[29]  Yacov Y. Haimes,et al.  A holistic roadmap for survivable infrastructure systems , 2002, IEEE Trans. Syst. Man Cybern. Part A.