{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,8,26]],"date-time":"2025-08-26T07:02:22Z","timestamp":1756191742074},"publisher-location":"Cham","reference-count":28,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783030360269"},{"type":"electronic","value":"9783030360276"}],"license":[{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019]]},"DOI":"10.1007\/978-3-030-36027-6_13","type":"book-chapter","created":{"date-parts":[[2019,11,23]],"date-time":"2019-11-23T08:03:04Z","timestamp":1574496184000},"page":"154-166","update-policy":"http:\/\/dx.doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":11,"title":["SEConomy: A Framework for the Economic Assessment of Cybersecurity"],"prefix":"10.1007","author":[{"given":"Bruno","family":"Rodrigues","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Muriel","family":"Franco","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Geetha","family":"Parangi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Burkhard","family":"Stiller","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2019,11,24]]},"reference":[{"key":"13_CR1","unstructured":"AFCE: The Economics of Cybersecurity: A Practical Framework for Cybersecurity Investment. The AFCE Cyber Committee (2013). \nhttps:\/\/www.afcea.org\/committees\/cyber\/documents\/cybereconfinal.pdf"},{"key":"13_CR2","first-page":"13","volume":"81","author":"J Bauer","year":"2011","unstructured":"Bauer, J., Van Eeten, M.: Introduction to the economics of cybersecurity. Commun. Strat. 81, 13\u201322 (2011)","journal-title":"Commun. Strat."},{"key":"13_CR3","unstructured":"BBC: Boeing Admits It \u2018Fell Short\u2019 on Safety Alert for 737, pp. 1\u20133. BBC News (2019). \nhttps:\/\/www.bbc.com\/news\/business-48461110"},{"key":"13_CR4","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"10","DOI":"10.1007\/978-3-642-16825-3_2","volume-title":"Advances in Information and Computer Security","author":"R B\u00f6hme","year":"2010","unstructured":"B\u00f6hme, R.: Security metrics and security investment models. In: Echizen, I., Kunihiro, N., Sasaki, R. (eds.) IWSEC 2010. LNCS, vol. 6434, pp. 10\u201324. Springer, Heidelberg (2010). \nhttps:\/\/doi.org\/10.1007\/978-3-642-16825-3_2"},{"key":"13_CR5","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1007\/978-3-642-39498-0_1","volume-title":"The Economics of Information Security and Privacy","author":"M Brecht","year":"2013","unstructured":"Brecht, M., Nowey, T.: A closer look at information security costs. In: B\u00f6hme, R. (ed.) The Economics of Information Security and Privacy, pp. 3\u201324. Springer, Heidelberg (2013). \nhttps:\/\/doi.org\/10.1007\/978-3-642-39498-0_1"},{"key":"13_CR6","doi-asserted-by":"publisher","first-page":"397","DOI":"10.2307\/23044049","volume":"35","author":"PY Chen","year":"2011","unstructured":"Chen, P.Y., Kataria, G., Krishnan, R.: Correlated failures, diversification, and information security risk management. MIS Q. 35, 397\u2013422 (2011)","journal-title":"MIS Q."},{"key":"13_CR7","series-title":"IFIP International Federation for Information Processing","doi-asserted-by":"publisher","first-page":"15","DOI":"10.1007\/978-0-387-75462-8_2","volume-title":"Critical Infrastructure Protection","author":"S Dynes","year":"2008","unstructured":"Dynes, S., Goetz, E., Freeman, M.: Cyber security: are economic incentives adequate? In: Goetz, E., Shenoi, S. (eds.) ICCIP 2007. IIFIP, vol. 253, pp. 15\u201327. Springer, Boston (2008). \nhttps:\/\/doi.org\/10.1007\/978-0-387-75462-8_2"},{"key":"13_CR8","doi-asserted-by":"publisher","first-page":"11","DOI":"10.1109\/MSP.2016.64","volume":"14","author":"M Felici","year":"2016","unstructured":"Felici, M., Wainwright, N., Cavallini, S., Bisogni, F.: What\u2019s new in the economics of cybersecurity? IEEE Secur. Priv. 14, 11\u201313 (2016). \nhttps:\/\/doi.org\/10.1109\/MSP.2016.64","journal-title":"IEEE Secur. Priv."},{"key":"13_CR9","unstructured":"Garg, P., Kohnfelder, L.: The threat to our products, pp. 1\u20138. Microsoft (1999). \nhttps:\/\/adam.shostack.org\/microsoft\/The-Threats-To-Our-Products.docx"},{"key":"13_CR10","doi-asserted-by":"publisher","first-page":"438","DOI":"10.1145\/581271.581274","volume":"5","author":"LA Gordon","year":"2002","unstructured":"Gordon, L.A., Loeb, M.P.: The economics of information security investment. ACM Trans. Inf. Syst. Secur. 5, 438\u2013457 (2002). \nhttps:\/\/doi.org\/10.1145\/581271.581274","journal-title":"ACM Trans. Inf. Syst. Secur."},{"key":"13_CR11","unstructured":"Horng, T.C.: A comparative analysis of supply chain management practices by Boeing and Airbus: long-term strategic implications. Master thesis, Massachusetts Institute of Technology (MIT) (2006)"},{"key":"13_CR12","doi-asserted-by":"crossref","unstructured":"Jentzsch, N.: State-of-the-Art of the Economics of Cyber-Security and Privacy, vol. 4. IPACSO Deliverable D4.1 (2016)","DOI":"10.2139\/ssrn.2671291"},{"key":"13_CR13","unstructured":"Kornecki, A.J., Hall, K.: Approaches to assure safety in fly-by-wire systems: Airbus vs. Boeing. In: IASTED Conference on Software Engineering and Applications (2004)"},{"key":"13_CR14","doi-asserted-by":"publisher","first-page":"42","DOI":"10.1016\/j.icte.2018.02.001","volume":"4","author":"LA Maglaras","year":"2018","unstructured":"Maglaras, L.A., et al.: Cyber security of critical infrastructures. ICT Express 4, 42\u201345 (2018). \nhttps:\/\/doi.org\/10.1016\/j.icte.2018.02.001\n\n. \nhttp:\/\/www.sciencedirect.com\/science\/article\/pii\/S2405959517303880\n\n. SI: CI and Smart Grid Cyber Security","journal-title":"ICT Express"},{"key":"13_CR15","doi-asserted-by":"publisher","first-page":"394","DOI":"10.1177\/0020702014540618","volume":"69","author":"C McGuffin","year":"2014","unstructured":"McGuffin, C., Mitchell, P.: On domains: cyber and the practice of warfare. Int. J.: Can. J. Glob. Policy Anal. 69, 394\u2013412 (2014)","journal-title":"Int. J.: Can. J. Glob. Policy Anal."},{"key":"13_CR16","unstructured":"Moore, S.: Gartner Forecasts Worldwide Information Security Spending to Exceed 124 Billion in 2019. Gartner (2018). \nhttps:\/\/www.gartner.com\/en\/newsroom\/press-releases\/2018-08-15-gartner-forecasts-worldwide-information-security-spending-to-exceed-124-billion-in-2019"},{"key":"13_CR17","doi-asserted-by":"publisher","first-page":"103","DOI":"10.1016\/j.ijcip.2010.10.002","volume":"3","author":"T Moore","year":"2010","unstructured":"Moore, T.: The economics of cybersecurity: principles and policy options. Int. J. Crit. Infrastruct. Prot. (IJCNIP) 3, 103\u2013117 (2010). \nhttps:\/\/doi.org\/10.1016\/j.ijcip.2010.10.002\n\n. \nhttp:\/\/www.sciencedirect.com\/science\/article\/pii\/S1874548210000429","journal-title":"Int. J. Crit. Infrastruct. Prot. (IJCNIP)"},{"key":"13_CR18","unstructured":"Morgan, S.: 2019 Official Annual Cybercrime Report. Herjavec Group (2019). \nhttps:\/\/bit.ly\/2TouUT2"},{"key":"13_CR19","unstructured":"NIST: Security and Privacy Controls for Federal Information Systems and Organizations, vol. 800, pp. 8\u201313. National Institute of Standards and Technology (NIST) Special Publication (2013)"},{"key":"13_CR20","unstructured":"NIST: Guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach. Technical report, National Institute of Standards and Technology (NIST) (2014)"},{"key":"13_CR21","doi-asserted-by":"publisher","first-page":"110","DOI":"10.1016\/j.ijcip.2009.07.002","volume":"2","author":"E Rich","year":"2009","unstructured":"Rich, E., Gonzalez, J.J., Qian, Y., Sveen, F.O., Radianti, J., Hillen, S.: Emergent vulnerabilities in integrated operations: a proactive simulation study of economic risk. Int. J. Crit. Infrastruct. Prot. 2, 110\u2013123 (2009). \nhttps:\/\/doi.org\/10.1016\/j.ijcip.2009.07.002\n\n. \nhttp:\/\/www.sciencedirect.com\/science\/article\/pii\/S1874548209000183","journal-title":"Int. J. Crit. Infrastruct. Prot."},{"key":"13_CR22","unstructured":"Robert, S., Vijay, T., Tim, Z.: Best Practices in Cyber Supply Chain Risk Management, pp. 1\u201314. US Resilience Project (2016)"},{"key":"13_CR23","unstructured":"Shostack, A.: Experiences Threat Modeling at Microsoft, pp. 1\u201311. Microsoft (2008). \nhttps:\/\/adam.shostack.org\/modsec08\/Shostack-ModSec08-Experiences-Threat-Modeling-At-Microsoft.pdf"},{"key":"13_CR24","first-page":"45","volume":"38","author":"W Sonnenreich","year":"2006","unstructured":"Sonnenreich, W., Albanese, J., Stout, B., et al.: Return on security investment (ROSI)-a practical quantitative model. J. Res. Pract. Inf. Technol. 38, 45\u201352 (2006)","journal-title":"J. Res. Pract. Inf. Technol."},{"key":"13_CR25","doi-asserted-by":"crossref","unstructured":"Takagi, T., Sugeno, M.: Fuzzy identification of systems and its applications to modeling and control. In: Readings in Fuzzy Sets for Intelligent Systems, pp. 387\u2013403. Elsevier (1993)","DOI":"10.1016\/B978-1-4832-1450-4.50045-6"},{"key":"13_CR26","doi-asserted-by":"publisher","first-page":"14","DOI":"10.1109\/91.481841","volume":"4","author":"HO Wang","year":"1996","unstructured":"Wang, H.O., Tanaka, K., Griffin, M.F.: An approach to fuzzy control of nonlinear systems: stability and design issues. IEEE Trans. Fuzzy Syst. 4, 14\u201323 (1996)","journal-title":"IEEE Trans. Fuzzy Syst."},{"key":"13_CR27","unstructured":"WhiteHouse: The Cost of Malicious Cyber Activity to the U.S. Economy. White House (2018). \nhttps:\/\/www.whitehouse.gov\/wp-content\/uploads\/2018\/03\/The-Cost-of-Malicious-Cyber-Activity-to-the-U.S.-Economy.pdf"},{"key":"13_CR28","unstructured":"Wuyts, K., Scandariato, R., Joosen, W., Deng, M., Preneel, B.: LINDDUN: a privacy threat analysis framework, pp. 1\u201323. DistriNet (2019). \nhttps:\/\/people.cs.kuleuven.be\/~kim.wuyts\/LINDDUN\/LINDDUN.pdf"}],"container-title":["Lecture Notes in Computer Science","Economics of Grids, Clouds, Systems, and Services"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-36027-6_13","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,11,23]],"date-time":"2019-11-23T08:20:05Z","timestamp":1574497205000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-030-36027-6_13"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019]]},"ISBN":["9783030360269","9783030360276"],"references-count":28,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-36027-6_13","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2019]]},"assertion":[{"value":"24 November 2019","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"GECON","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on the Economics of Grids, Clouds, Systems, and Services","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Leeds","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"United Kingdom","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2019","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"17 September 2019","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"19 September 2019","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"16","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"gecon2019","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/2019.gecon-conference.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Easychair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"48","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"12","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"10","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"25% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"4.33","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"2.89","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}