...
  • 主题
高级搜索  >
历史搜索 清空历史
首页> 外文期刊>International Journal of Production Research >Cybersecurity investments in a two-echelon supply chain with third-party risk propagation
【24h】

Cybersecurity investments in a two-echelon supply chain with third-party risk propagation

机译：网络安全在双梯队供应链中投资，第三方风险传播

获取原文
获取原文并翻译 | 示例
           
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Cybersecurity presents a monumental challenge for interconnected supply chains, as an attack on one node can compromise an entire business. In this paper, we propose a game theory model to investigate cybersecurity investments with third-party risk propagation in a two-echelon supply chain consisting of one retailer and n suppliers. The optimal investments and their responses to relevant security characteristics, such as intrinsic vulnerability, propagation probability, number of suppliers, and attack probability, are analysed and discussed both theoretically and numerically considering one-stage risk propagation. It is found that there are serious prisoners' dilemma and free-riding phenomena in such a scenario. To mitigate third-party risks and improve the investment efficiency, three coordination mechanisms, joint decision, security risk compensation, and security information sharing, are presented and compared numerically. The results indicate that joint decision-making and security risk compensation perform better on stimulating firms' investments and reducing expected costs both individually and collectively relative to security information sharing. Furthermore, the case of two-stage risk propagation is also supplemented and compared with one-stage case. Based on these findings, some management insights are recommended to cybersecurity managers in supply chains for designing more efficient cybersecurity mechanisms and investment strategies.
机译：网络安全对互联供应链提出了一个巨大的挑战，因为对一个节点的攻击可能会妥协整个业务。在本文中，我们提出了一种博弈论模型，调查网络安全投资，其中第三方风险传播在由一个零售商和N个供应商组成的双梯队供应链中。在理论上和数值上分析并讨论了对相关安全特性的最佳投资及其对相关安全特性的反应，例如内在漏洞，传播概率，供应商的数量和攻击概率以及讨论一级风险传播。有人发现，在这种情况下有严重的囚犯困境和搭便车现象。为了减轻第三方风险，提高投资效率，三个协调机制，联合决定，安全风险赔偿和安全信息共享，并在数值上进行比较。结果表明，联合决策和安全风险赔偿对刺激企业的投资和减少单独和集体的预期成本相对于安全信息共享，更好。此外，还补充了两阶段风险繁殖的情况，并与单级案例进行了补充。根据这些调查结果，建议使用一些管理层，以供应链中的网络安全管理员设计更有效的网络安全机制和投资策略。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号