{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,24]],"date-time":"2026-01-24T14:45:31Z","timestamp":1769265931735,"version":"3.49.0"},"reference-count":33,"publisher":"Association for Computing Machinery (ACM)","issue":"4","license":[{"start":{"date-parts":[[2018,8,28]],"date-time":"2018-08-28T00:00:00Z","timestamp":1535414400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["SIGMETRICS Perform. Eval. Rev."],"published-print":{"date-parts":[[2018,8,28]]},"abstract":"<jats:p>Recent work in security has illustrated that solutions aimed at detection and elimination of security threats alone are unlikely to result in a robust cyberspace. As an orthogonal approach to mitigating security problems, some researchers have pursued the use of cyber-insurance as a suitable risk management technique. In this regard, a recent work by the authors in [1] have proposed efficient monopoly cyberinsurance markets that maximize social welfare of users in a communication network via premium discriminating them. However, the work has a major drawback in the insurer not being able to make strictly positive profit in expectation, which in turn might lead to unsuccessful insurance markets. In this paper, we provide a method (based on the model in [1]) to overcome this drawback for the risk-averse premium discriminating monopoly cyber-insurer, and prove it in theory. More specifically, we propose a non-regulatory mechanism to allow monopoly cyber-insurers to make strictly positive profit in expectation. To investigate the general effectiveness of our mechanism beyond a monopoly setting with full coverage, we conduct numerical experiments (comparing social welfare at market equilibrium) on (a) practical Internet-scale network topologies that are formed by users who are free to decide for themselves whether they want to purchase insurance or not, (b) settings of perfect and imperfect market competition, and (c) scenarios with partial insurance coverage.<\/jats:p>","DOI":"10.1145\/3273996.3273999","type":"journal-article","created":{"date-parts":[[2018,8,30]],"date-time":"2018-08-30T13:45:11Z","timestamp":1535636711000},"page":"7-15","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":18,"title":["Improving Cyber-Security via Profitable Insurance Markets"],"prefix":"10.1145","volume":"45","author":[{"given":"Ranjan","family":"Pal","sequence":"first","affiliation":[{"name":"University of Southern California"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Leana","family":"Golubchik","sequence":"additional","affiliation":[{"name":"University of Southern California"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Konstantinos","family":"Psounis","sequence":"additional","affiliation":[{"name":"University of Southern California"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Pan","family":"Hui","sequence":"additional","affiliation":[{"name":"HKUST"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2018,8,28]]},"reference":[{"key":"e_1_2_1_1_1","volume-title":"Will cyber-insurance improve network security: A market analysis,\" in To Appear in IEEE INFOCOM","author":"Pal R.","year":"2014","unstructured":"R. Pal , L. Golubchik , K. Psounis , and P. Hui , \" Will cyber-insurance improve network security: A market analysis,\" in To Appear in IEEE INFOCOM , 2014 . R. Pal, L. Golubchik, K. Psounis, and P. Hui, \"Will cyber-insurance improve network security: A market analysis,\" in To Appear in IEEE INFOCOM, 2014."},{"key":"e_1_2_1_2_1","volume-title":"Information security economics and beyond,\" in Information Security Summit","author":"Anderson R.","year":"2008","unstructured":"R. Anderson and T. Moore , \" Information security economics and beyond,\" in Information Security Summit , 2008 . R. Anderson and T. Moore, \"Information security economics and beyond,\" in Information Security Summit, 2008."},{"key":"e_1_2_1_3_1","volume-title":"Economic incentives to increase security in the internet: The case for insurance,\" in IEEE INFOCOM","author":"Lelarge M.","year":"2009","unstructured":"M. Lelarge and J. Bolot , \" Economic incentives to increase security in the internet: The case for insurance,\" in IEEE INFOCOM , 2009 . M. Lelarge and J. Bolot, \"Economic incentives to increase security in the internet: The case for insurance,\" in IEEE INFOCOM, 2009."},{"key":"e_1_2_1_4_1","volume-title":"Voluntary participation in cyber-insurance markets,\" in WEIS","author":"Naghizadeh P.","year":"2014","unstructured":"P. Naghizadeh and M. Liu , \" Voluntary participation in cyber-insurance markets,\" in WEIS , 2014 . P. Naghizadeh and M. Liu, \"Voluntary participation in cyber-insurance markets,\" in WEIS, 2014."},{"key":"e_1_2_1_5_1","volume-title":"Comments to the Department of Commerce on Incentives to Adopt Improved Cyber-Security Practices","author":"Romanovsky S.","year":"2013","unstructured":"S. Romanovsky , Comments to the Department of Commerce on Incentives to Adopt Improved Cyber-Security Practices . April 2013 , 2013. S. Romanovsky, Comments to the Department of Commerce on Incentives to Adopt Improved Cyber-Security Practices. April 2013, 2013."},{"key":"e_1_2_1_6_1","volume-title":"June, 2012","author":"Report The Betterly","year":"2012","unstructured":"Betterly, The Betterly Report : Cyber\/Privacy Insurance Market Survey . June, 2012 , 2012 . Betterly, The Betterly Report: Cyber\/Privacy Insurance Market Survey. June, 2012, 2012."},{"key":"e_1_2_1_7_1","volume-title":"Arimic Review of Recent Developments in the Cyber-Insurance Market","author":"Arimic","year":"2013","unstructured":"Arimic , Arimic Review of Recent Developments in the Cyber-Insurance Market . 2013 , 2013 Arimic, Arimic Review of Recent Developments in the Cyber-Insurance Market. 2013, 2013"},{"key":"e_1_2_1_8_1","unstructured":"M. Thompson \"Why cyber-insurance is the next big thing \" in CNBC Report 2014.  M. Thompson \"Why cyber-insurance is the next big thing \" in CNBC Report 2014."},{"key":"e_1_2_1_9_1","volume-title":"Modeling cyber-insurance: Towards a unifying framework,\" in WEIS","author":"Bohme R.","year":"2010","unstructured":"R. Bohme and G. Schwartz , \" Modeling cyber-insurance: Towards a unifying framework,\" in WEIS , 2010 . R. Bohme and G. Schwartz, \"Modeling cyber-insurance: Towards a unifying framework,\" in WEIS, 2010."},{"key":"e_1_2_1_10_1","volume-title":"Microeconomic Theory","author":"Mas-Collel A.","year":"1995","unstructured":"A. Mas-Collel , M. D. Winston , and J. R. Green , Microeconomic Theory . Oxford University Press , 1995 , 1995. A. Mas-Collel, M. D.Winston, and J. R. Green, Microeconomic Theory. Oxford University Press, 1995, 1995."},{"key":"e_1_2_1_11_1","article-title":"Interdependent security","volume":"26","author":"Kunreuther H.","year":"2002","unstructured":"H. Kunreuther and G. Heal , \" Interdependent security ,\" Journal of Risk and Uncertainty , vol. 26 , 2002 . H. Kunreuther and G. Heal, \"Interdependent security,\" Journal of Risk and Uncertainty, vol. 26, 2002.","journal-title":"Journal of Risk and Uncertainty"},{"key":"e_1_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/1403027.1403034"},{"key":"e_1_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/1375457.1375463"},{"key":"e_1_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-30054-7_14"},{"key":"e_1_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.peva.2013.10.003"},{"key":"e_1_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-94-015-7957-5"},{"key":"e_1_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-25280-8_12"},{"key":"e_1_2_1_18_1","volume-title":"An economic analysis of regulating security investments in the internet,\" in IEEE INFOCOM","author":"Khouzani A.","year":"2013","unstructured":"A. Khouzani , S. Sen , and N. Shroff , \" An economic analysis of regulating security investments in the internet,\" in IEEE INFOCOM , 2013 . A. Khouzani, S. Sen, and N. Shroff, \"An economic analysis of regulating security investments in the internet,\" in IEEE INFOCOM, 2013."},{"key":"e_1_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2017.2684801"},{"key":"e_1_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/2425248.2425271"},{"key":"e_1_2_1_21_1","volume-title":"psychology, and sociology of security,\" in Financial Cryptography","author":"Odlyzko A.","year":"2003","unstructured":"A. Odlyzko , \"Economics , psychology, and sociology of security,\" in Financial Cryptography , 2003 . A. Odlyzko, \"Economics, psychology, and sociology of security,\" in Financial Cryptography, 2003."},{"key":"e_1_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2014.30"},{"key":"e_1_2_1_23_1","volume-title":"Estimating systematic risk in real-world networks,\" in FC","author":"Lazska A.","year":"2014","unstructured":"A. Lazska , B. Johnson , J. Grossklags , and M. Felegyhazi , \" Estimating systematic risk in real-world networks,\" in FC , 2014 . A. Lazska, B. Johnson, J. Grossklags, and M. Felegyhazi, \"Estimating systematic risk in real-world networks,\" in FC, 2014."},{"key":"e_1_2_1_24_1","volume-title":"Cyber-risk decision models: To insure it or not?,\" Decision Support Systems","author":"Mukhopadhyay A.","year":"2013","unstructured":"A. Mukhopadhyay , S. Chatterjee , D. Saha , A. Mahanti , and S. K. Sadhukan , \" Cyber-risk decision models: To insure it or not?,\" Decision Support Systems , vol. 56 , 2013 . A. Mukhopadhyay, S. Chatterjee, D. Saha, A. Mahanti, and S. K. Sadhukan, \"Cyber-risk decision models: To insure it or not?,\" Decision Support Systems, vol. 56, 2013."},{"key":"e_1_2_1_25_1","volume-title":"Copula based actuarial model for pricing cyber-insurance policies,\" Insurance Markets and Companies: Analyses and Actuarial Computations","author":"Herath S. B.","year":"2011","unstructured":"S. B. Herath and C. T. Herath , \" Copula based actuarial model for pricing cyber-insurance policies,\" Insurance Markets and Companies: Analyses and Actuarial Computations , vol. 2 , 2011 . S. B. Herath and C. T. Herath, \"Copula based actuarial model for pricing cyber-insurance policies,\" Insurance Markets and Companies: Analyses and Actuarial Computations, vol. 2, 2011."},{"key":"e_1_2_1_26_1","volume-title":"Lessons from behavioral economics,\" in SHB","author":"Baddeley M.","year":"2011","unstructured":"M. Baddeley , \" Information security : Lessons from behavioral economics,\" in SHB , 2011 . M. Baddeley, \"Information security: Lessons from behavioral economics,\" in SHB, 2011."},{"key":"e_1_2_1_27_1","volume-title":"Insurance for Cyber-Attacks: The Issue of Setting Premiums in Context","author":"Toregas C.","year":"2014","unstructured":"C. Toregas and N. Zahn , Insurance for Cyber-Attacks: The Issue of Setting Premiums in Context . GeorgeWashington University , 2014 . C. Toregas and N. Zahn, Insurance for Cyber-Attacks: The Issue of Setting Premiums in Context. GeorgeWashington University, 2014."},{"key":"e_1_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/316194.316229"},{"key":"e_1_2_1_29_1","first-page":"647","volume-title":"Twenty-First Annual Joint Conference of the IEEE Computer and Communications Societies. Proceedings. IEEE","volume":"2","author":"Bu T.","year":"2002","unstructured":"T. Bu and D. Towsley , \" On distinguishing between internet power law topology generators,\" in INFOCOM 2002 . Twenty-First Annual Joint Conference of the IEEE Computer and Communications Societies. Proceedings. IEEE , vol. 2 , pp. 638? 647 , IEEE, 2002 T. Bu and D. Towsley, \"On distinguishing between internet power law topology generators,\" in INFOCOM 2002. Twenty-First Annual Joint Conference of the IEEE Computer and Communications Societies. Proceedings. IEEE, vol. 2, pp. 638?647, IEEE, 2002"},{"key":"e_1_2_1_30_1","article-title":"Internalizing externalities of loss prevention through insurance monopoly","volume":"32","author":"Hoffman A.","year":"2007","unstructured":"A. Hoffman , \" Internalizing externalities of loss prevention through insurance monopoly ,\" Geneva Risk and Insurance Review , vol. 32 , 2007 . A. Hoffman, \"Internalizing externalities of loss prevention through insurance monopoly,\" Geneva Risk and Insurance Review, vol. 32, 2007.","journal-title":"Geneva Risk and Insurance Review"},{"key":"e_1_2_1_31_1","doi-asserted-by":"crossref","unstructured":"N.Shetty G.Schwarz M.Feleghyazi and J.Walrand \"Competitive cyber-insurance and internet security \" in WEIS 2009.  N.Shetty G.Schwarz M.Feleghyazi and J.Walrand \"Competitive cyber-insurance and internet security \" in WEIS 2009.","DOI":"10.1007\/978-1-4419-6967-5_12"},{"key":"e_1_2_1_32_1","volume-title":"On economic perspectives of internet security,\" in ACM SIGMETRICS Workshop on Mathematical Performance Modeling and Analysis (MAMA)","author":"Pal R.","year":"2010","unstructured":"R. Pal and L. Golubchik , \" On economic perspectives of internet security,\" in ACM SIGMETRICS Workshop on Mathematical Performance Modeling and Analysis (MAMA) , 2010 . R. Pal and L. Golubchik, \"On economic perspectives of internet security,\" in ACM SIGMETRICS Workshop on Mathematical Performance Modeling and Analysis (MAMA), 2010."},{"key":"e_1_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-25280-8_18"}],"container-title":["ACM SIGMETRICS Performance Evaluation Review"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3273996.3273999","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3273996.3273999","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T00:44:44Z","timestamp":1750207484000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3273996.3273999"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,8,28]]},"references-count":33,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2018,8,28]]}},"alternative-id":["10.1145\/3273996.3273999"],"URL":"https:\/\/doi.org\/10.1145\/3273996.3273999","relation":{},"ISSN":["0163-5999"],"issn-type":[{"value":"0163-5999","type":"print"}],"subject":[],"published":{"date-parts":[[2018,8,28]]},"assertion":[{"value":"2018-08-28","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}