Quantitative Assessment of Cybersecurity Risks for Mitigating Data Breaches in Business Systems
The evaluation of data breaches and cybersecurity risks has not yet been formally addressed in modern business systems. There has been a tremendous increase in the generation, usage and consumption of industrial and business data as a result of smart and computational intensive software systems. Thi...
| Main Authors: | , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
MDPI AG
2021-04-01
|
| Series: | Applied Sciences |
| Subjects: | |
| Online Access: | https://www.mdpi.com/2076-3417/11/8/3678 |
| _version_ | 1797537155269001216 |
|---|---|
| author | Abdullah M. Algarni Vijey Thayananthan Yashwant K. Malaiya |
| author_facet | Abdullah M. Algarni Vijey Thayananthan Yashwant K. Malaiya |
| author_sort | Abdullah M. Algarni |
| collection | DOAJ |
| description | The evaluation of data breaches and cybersecurity risks has not yet been formally addressed in modern business systems. There has been a tremendous increase in the generation, usage and consumption of industrial and business data as a result of smart and computational intensive software systems. This has resulted in an increase in the attack surface of these cyber systems. Consequently, there has been a consequent increase in the associated cybersecurity risks. However, no significant studies have been conducted that examine, compare, and evaluate the approaches used by the risk calculators to investigate the data breaches. The development of an efficient cybersecurity solution allows us to mitigate the data breaches threatened by the cybersecurity risks such as cyber-attacks against database storage, processing and management. In this paper, we develop a comprehensive, formal model that estimates the two components of security risks: breach cost and the likelihood of a data breach within 12 months. The data used in this model are taken from the industrial business report, which provides the necessary information collected and the calculators developed by the major organizations in the field. This model integrated with the cybersecurity solution uses consolidated factors that have a significant impact on the data breach risk. We propose mathematical models of how the factors impact the cost and the likelihood. These models allow us to conclude that results obtained through the models mitigate the data breaches in the potential and future business system dynamically. |
| first_indexed | 2024-03-10T12:11:59Z |
| format | Article |
| id | doaj.art-e4a1ede101bf42ac8a2bb6438f09d30b |
| institution | Directory Open Access Journal |
| issn | 2076-3417 |
| language | English |
| last_indexed | 2024-03-10T12:11:59Z |
| publishDate | 2021-04-01 |
| publisher | MDPI AG |
| record_format | Article |
| series | Applied Sciences |
| spelling | doaj.art-e4a1ede101bf42ac8a2bb6438f09d30b2023-11-21T16:12:28ZengMDPI AGApplied Sciences2076-34172021-04-01118367810.3390/app11083678Quantitative Assessment of Cybersecurity Risks for Mitigating Data Breaches in Business SystemsAbdullah M. Algarni0Vijey Thayananthan1Yashwant K. Malaiya2Computer Science Department, King Abdulaziz University, Jeddah 21589, Saudi ArabiaComputer Science Department, King Abdulaziz University, Jeddah 21589, Saudi ArabiaComputer Science Department, Colorado State University, Fort Collins, CO 80523, USAThe evaluation of data breaches and cybersecurity risks has not yet been formally addressed in modern business systems. There has been a tremendous increase in the generation, usage and consumption of industrial and business data as a result of smart and computational intensive software systems. This has resulted in an increase in the attack surface of these cyber systems. Consequently, there has been a consequent increase in the associated cybersecurity risks. However, no significant studies have been conducted that examine, compare, and evaluate the approaches used by the risk calculators to investigate the data breaches. The development of an efficient cybersecurity solution allows us to mitigate the data breaches threatened by the cybersecurity risks such as cyber-attacks against database storage, processing and management. In this paper, we develop a comprehensive, formal model that estimates the two components of security risks: breach cost and the likelihood of a data breach within 12 months. The data used in this model are taken from the industrial business report, which provides the necessary information collected and the calculators developed by the major organizations in the field. This model integrated with the cybersecurity solution uses consolidated factors that have a significant impact on the data breach risk. We propose mathematical models of how the factors impact the cost and the likelihood. These models allow us to conclude that results obtained through the models mitigate the data breaches in the potential and future business system dynamically.https://www.mdpi.com/2076-3417/11/8/3678data breach costdata breach probabilitycybersecurityrisk assessmentrisk management |
| spellingShingle | Abdullah M. Algarni Vijey Thayananthan Yashwant K. Malaiya Quantitative Assessment of Cybersecurity Risks for Mitigating Data Breaches in Business Systems Applied Sciences data breach cost data breach probability cybersecurity risk assessment risk management |
| title | Quantitative Assessment of Cybersecurity Risks for Mitigating Data Breaches in Business Systems |
| title_full | Quantitative Assessment of Cybersecurity Risks for Mitigating Data Breaches in Business Systems |
| title_fullStr | Quantitative Assessment of Cybersecurity Risks for Mitigating Data Breaches in Business Systems |
| title_full_unstemmed | Quantitative Assessment of Cybersecurity Risks for Mitigating Data Breaches in Business Systems |
| title_short | Quantitative Assessment of Cybersecurity Risks for Mitigating Data Breaches in Business Systems |
| title_sort | quantitative assessment of cybersecurity risks for mitigating data breaches in business systems |
| topic | data breach cost data breach probability cybersecurity risk assessment risk management |
| url | https://www.mdpi.com/2076-3417/11/8/3678 |
| work_keys_str_mv | AT abdullahmalgarni quantitativeassessmentofcybersecurityrisksformitigatingdatabreachesinbusinesssystems AT vijeythayananthan quantitativeassessmentofcybersecurityrisksformitigatingdatabreachesinbusinesssystems AT yashwantkmalaiya quantitativeassessmentofcybersecurityrisksformitigatingdatabreachesinbusinesssystems |